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THE  RESOURCE  FOR  INFORMATION  EXECUTIVES 


UNDEUVER 


BY  THOMAS  WAILGUM 


WHEN  YOU  STEPPED  AWAY 
FROM  YOUR  DESK,  A  WORM  WAS 
DETECTED,  QUARANTINED  AND 
ELIMINATED  BEFORE  ANYONE 
NOTICED  YOU  WERE  GONE. 
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Trend  Micro  and  Cisco  Systems —  working  together. 

Imagine  a  network  solution  so  advanced,  so  secure,  so  ingeniously  proactive, 

you  may  never  have  to  worry  about  an  outbreak  again. 


Find  out  more  at  www.trendmicro.com/cisco 


“LET  ME  GUESS. 

JUST  ONE  MORE  THING 

BEFORE  I  GO?” 
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We’ve  all  been  there.  Cramming  more  work  into  the  same  workweek. 

Taking  on  unfamiliar  tasks.  Trying  to  maneuver  through  complex 
systems.  Every  company  has  different  productivity  issues  and  one 
common  problem:  no  time  to  address  them.  How  do  you  become 

more  on  demand  in  this  scenario?  “  CLONING,  PERHAPS?” 

Or  the  easier,  IBM-inspired  option:  human  capital  management.  In 
plain  English,  that’s  how  you  can  get  more  done  with  the  same  people. 

It’s  about  your  culture:  creating  an  environment  where  employees 
stay  motivated  and  the  work  flows.  Are  you  tying  the  right  rewards  to 
the  right  tasks?  Are  the  right  assignments  going  to  the  right  people? 

And  it’s  about  new  ways  to  learn  and  collaborate.  Embedded  learning, 
for  instance,  helps  you  deliver  information  to  people  automatically  -  even 

when  they  don’t  know  they  need  it  yet.  ^XHAT  SOUNDS  COOL!’ 

Aligning  individual  talents  with  corporate  goals  is  rewarding  in 
every  sense.  People  do  what  they’re  best  at.  They  feel  appreciated. 

They  learn  new  skills,  benefiting  themselves  and  your  company. 

Bottom  line?  More  gets  done.  And  IBM  can  help  you  get  started. 

SO  YOU’RE  LIKE  AN  EXTRA  PAIR  OF  HANDS.” 

Actually,  we  have  over  3,000  learning  and  human  capital  specialists. 

People  who  are  experts  in  taking  a  holistic  view  of  productivity 
issues  and  zeroing  in  on  where  best  to  start.  Want  to  learn  more? 

Visit  ibm.com/ondemand/performance 
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You  did  everything  right,  but... 
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your  IT  spending  isn't  aligned  with  the  business  strategy, 

you've  failed  the  company. 


Your  job  has  moved  beyond  just  technology — you 
need  to  embrace  your  company's  overall  business 
objectives.  Primavera  can  help.  For  20  years,  we've 
been  working  toward  the  ultimate  project  portfolio 
management  solution. 

Our  software  helps  you  prioritize  your  entire  project 
portfolio,  so  you  can  optimize  people,  projects,  and 
processes  to  stay  focused  on  business  goals. 


We  saved  a  Fortune  1 00  company  $1  5  million 
in  nine  months.  How  much  can  we  save  you? 

To  estimate  your  company's  potential  savings  with 
our  convenient  online  ROI  Calculator,  visit: 

www.primavera.com/ppm 
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mageRUNNER  4570 
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If  you  could  create,  manage,  and  share  documents 
on  paper  or  over  the  network,  imagine  what  you 
could  accomplish  with  your  day.  With  Canon’s 


www.imagerunner.com  1-800-0K-CAN0N 


Not  business  as  usual. 


Canon,  Canon  Know  How  and  IMAGERUNNER  are  registered  trademarks  of  Canon  Inc  in  the  United  States  and  may  also 
be  registered  trademarks  in  other  countries.  IMAGEANYWARE  is  a  service  mark  of  Canon  U  SA,  Inc.  ©  2004  Canon  U  SA,  Inc. 
Ail  rights  reserved. 


imageRUNNER  4570,  Canon  gives  you  another 
innovative  solution  to  seamlessly  integrate  the 
paper  world  with  the  digital  world.  And  the 


imageRUNNER  4570  can  be  tailored  to 
meet  your  business  needs.  In  other  words, 


latest  addition  to  the  imageRUNNER®  line,  every 
day’s  potential  can  be  realized.  With  the  new 


when  you  choose  the  new  imageRUNNER  4570, 


you  choose  to  work  the  way  you  need  to. 
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TIMELY  UPDATES 

Election  Returns 
andSarboxRedux 


from  November  15  to  December  1 


BUSINESS  COLLABORATION 

Wicked  Good  Wikis 

The  definition  of  collaboration  may 
be  controversial,  but  CIOs  need  to 
have  it  on  their  radar  now,  since 
technology  plays  a  key  enabling  role 
in  successful  collaborations  (see 
A  Travel  Guide  to  Collaboration, 
Page  68).  One  of  the  newest  forms 
of  collaboration  to  hit  the  business 
world  is  the  wiki,  server  software 
that  allows  users  to  create  and  edit 
webpage  content.  Sounds  edgy, 
but  we’ve  got  a  gentle  introduction. 
Look  for  Wikis:  An  Introduction  in 
the  online  version  of  this  article  or 
at  www.cio.com/printlinks. 


►  The  latest  news  is  online.  You  can 
get  the  CIO  recap  on  the  election— 
and  what  it  means  to  you— at 
comment.cio.com/weighin. 

►  Get  the  latest  on  the 
Sarbanes-Oxley  deadline 
at  www.cio.com/sarbanes. 


ONLINE  EXCLUSIVE 

Use  the  Salary 
Wizard 

Benchmarking  those  new  staff 
positions?  Compiling  next  year’s 
budget?  Or  maybe  you  just  want  to 
make  the  case  for  your  next  raise. 
Visit  the  new  Salary  Wizard.  Our 
new  partnership  with  Salary.com 
brings  you  a  free  basic  report  or 
personalized  answers  with  a 
Personal  Salary  Preview.  Goto 
cio.salary.com. 
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Even  though  Wal-Mart's  RFID  deadline 
won't  be  met  (see  Tag,  You’re  Late,  Page 
50),  that  doesn’t  mean  RFID  may  not 
eventually  make  its  way  into  stores.  To 
get  a  full-motion  view  of  how  RFID  is 
going  to  move  along  the  supply  chain, 
watch  The  Basics  of  RFID  and  EPC  video. 
Find  the  link  at  the  online  version  of  this 
article  or  at  www.cio.com/printlinks. 


ENTERPRISE  TENSION 

in  Connect  Demand  with 
Supply,  columnist  Michael 
Schrage  says  supply  chain  man¬ 
agement  (SCM)  and  CRM  live  in 
parallel  universes  of  business  value 
(see  Page  47).  Where  can  enter¬ 
prise  architectures  create  value? 
Can  you  “optimize"  CRM  without 
undermining  SCM  efficiencies? 
Schrage  thinks  not.  What  do  you 
think?  Tell  him  in  the  ADD  A 
COMMENT  section  at  the 
end  of  this  article  online.  A 
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All  those  driven  to  maximize  the  ^ 

value  of  their  technology...D3V 


Brakes  help  you  go  faster 

Why  have  brakes  on  a  car?  Many  say,  “to  slow  it 
down.”  At  Protiviti,  we  believe  the  brakes  are 
there  to  help  you  go  faster. 

Controls  on  technology,  like  good  brakes,  allow  IT 
to  speed  ahead.  Technology  controls  allow  you  to 
innovate,  introduce  and  advance  your  solutions. 
You’ll  steer  through  the  dangerous  curves  that  put 
many  competitors  out  of  the  race:  lax  security,  failed 
continuity  and  poor  project  management.  Controls 
give  your  organization  the  confidence  to  push  your 
technology  to  the  edge  -  and  finish  ahead  of  the 
competition. 


Contact  Protiviti,  the  leader  in  independent  risk 
consulting  and  internal  audit  services.  We  provide 
services  globally  for  established  and  emerging 
companies  to  help  them  independently  identify, 
measure  and  manage  risk.  Our  professionals  have 
experience  in  a  wide  range  of  industries.  So 
whether  your  challenge  is  reporting  accurate 
results,  maximizing  the  value  of  technology  or 
adopting  business  controls  you  can  trust,  Protiviti 
delivers  quantifiable  solutions  that  make  a 
difference. ..Are  you  ready  to  Say  i? 

For  more  information  visit  protiviti.com 
or  call  1.888.556.7420. 


Technology  Risk 


©  2004  Protiviti  Inc. 


Business  Risk 


Internal  Audit 


YOU  MAY  NOT  HAVE  TIME  TO  STUDY 
THE  TCO  OF  WINDOWS  AND  LINUX, 
BUT  THE  YANKEE  GROUP  DOES. 


Microsoft 


" For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows ®  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 


-Laura  DiDio,  The  Yankee  Group,  April  2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded  that  a 
significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three  to  four 
times  as  much  without  delivering  tangibly  better  performance  or  business 
value.  These  findings  are  based  on  a  non-sponsored  worldwide  survey  of  1,000 
IT  administrators  and  C-level  executives  in  midsized  and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


Microsoft* 

Windows 
Server  System 


©2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Windows,  the  Windows  logo,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


From  the  Editor 


Pastore  with  Canis  lupus 
friend  Shunka  (at  right). 
To  learn  more  about  the 
nonprofit  Colorado  Wolf 
and  Wildlife  Center  in 
Florissant,  Colo.,  visit 
www.wolfeducation.org. 
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For  the  second  year  in  a  row, 
CIO  magazine  has  won  the 
prestigious  Jesse  H.  Neal 
National  Business  Journalism 
Award  for  editorial  excellence. 


A  Distant  Howl  Heard 


BEFORE  THE  START  of  our  CIO  100  Sympo¬ 
sium  this  past  August,  I  spent  a  few  days  knocking 
around  Colorado  Springs.  On  Saturday  morning, 
I  visited  the  Colorado  Wolf  and  Wildlife  Center,  a 
sanctuary  for  rescued  wolves,  coyotes  and  foxes. 
I  enjoyed  a  private  tour  that  put  me  inside  the 
fences,  face-to-face  with  several 
of  these  beautiful  timber,  arctic 
and  gray  wolves. 

Many  of  the  wolves  were  res¬ 
cued — from  atrocious  captive 
situations  or  impending  euthana¬ 
sia — by  Darlene  Kobobel,  who 
founded  and  runs  the  nonprofit 
operation.  Her  20  animals,  all  bonded  but  sterile 
pairs,  roam  their  own  outdoor  acre-sized  enclo¬ 
sures,  landscaped  by  Mother  Nature  with  junipers, 
scrub  oak,  tall  grasses,  boulders  and  rock  dens.  It’s 
not  freedom;  these  animals  wouldn’t  survive  in  the 
wild,  Darlene  explained  as  she  showed  me  around. 
But  it’s  a  far  cry  from  the  conditions  they  suffered 
before  she  took  them  in.  Nikita,  a  snow-white 
arctic  wolf,  spent  the  first  three  years  of  his  life 
confined  in  a  5-by-8-foot  wooden  crate.  When  Dar¬ 
lene  took  over  custody  of  him,  his  hind  leg  muscles 
were  atrophied,  his  toe  nails  were  more  than  2 
inches  long,  and  he  was  initially  too  scared  to  step 
out  of  the  box  into  his  new  home  at  the  sanctuary, 
having  never  known  any  other  environment. 


After  petting,  posing  for  pictures  and  generally 
messing  about  with  Nikita,  Mika,  Shunka  and  the 
others,  I  left  the  wolves,  reluctantly,  my  pants  cov¬ 
ered  in  muddy  paw  prints,  jacket  flecked  with 
gray  and  white  wolf  hairs,  face  smudged  by  wet 
wolf  kisses.  As  I  drove  Route  24  back  to  the  Broad¬ 
moor  Hotel  where  600  CIOs 
awaited,  I  made  that  wrenching 
mental  shift  from  tourist  to  edi¬ 
tor  and  conference  host.  But  I 
couldn’t  quite  get  wolves  out  of 
my  head. 

At  the  Sunday  reception,  the 
first  three  people  I  spoke  with — 
CIOs  from  a  midsize  bank,  a  giant  IT  vendor  and 
a  restaurant  chain — told  me  they  are  seeing  a  change 
at  their  companies,  a  shift  toward  growth  and  inno¬ 
vation  after  years  of  relentless  cost  control.  All  three 
were  beginning  to  invest  in  architecture  and  appli¬ 
cations,  to  take  more  calculated  risks  on  new  tech¬ 
nology,  and  to  venture  out  of  the  box  they’ve  been 
in  for  the  past  few  years. 

The  box.  That  brought  my  thoughts  back  to 
Nikita,  and  his  first  tentative  step  out  of  that 
confining  crate,  feeling  earth  and  grass  under 
his  feet  instead  of  soiled  newspaper,  squinting 
up  at  the  sun  reflecting  off  the  snow  on  distant 
Pikes  Peak. 

It’s  time  to  leave  the  box.  And  roam. 
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The  only  effective  security  is  preemption.  This  preemptive  power  is  only  available  with  the  Proventia™  Enterprise  Security  Platform  from  Internet  Security  Systems.  When 
security  flaws  are  discovered,  Internet  Security  Systems’  world-renowned  research  team  updates  Proventia  to  immediately  shield  you  before  attacks  are  released. 
Proventia  keeps  you  off  the  path  to  disaster  by  preemptively  securing  your  entire  IT  infrastructure  with  a  unified  family  of  intrusion  prevention  and  vulnerability 
management  products.  In  fact,  when  we  manage  Proventia  for  you,  we'll  even  guarantee  protection.  Need  proof?  Get  your  free  whitepaper,  Preemptive  Protection: 
Setting  a  New  Standard  in  Security,  at  www.iss.net/proof/CIO  or  call  800-776-2362. 
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Benchmarking  Solutions 


So  they  can  stay  that  way. 


Entergy  doesn’t  leave  measurement  of  IT  performance  to  chance. 


wmmm 


For  the  past  four  years,  this  New  Orleans-based  energy  firm  has  entrusted 
Gartner  to  help  it  benchmark  pricing  and  other  key  performance  indicators  of 
its  multimillion  dollar  outsourcing  arrangement.  The  relationship  has  paid  off  in  a  big 
way,  keeping  Entergy  in  the  top  25%  of  its  peer  group*  and  continuously  helping  its 
managers  discover  ways  to  improve  performance  and  add  value  to  the  business  by: 

•  Identifying  the  best  practices  that  are  contributing  to 
high  performance  and  sound  cost  control 

•  Embracing  latest  technologies  other  leaders 

in  its  peer  group  are  adopting  to  improve  productivity 

•  Assuring  managers  are  getting  the  outsourcing  deal  they  deserve 


Why  would  an 
amazingly  successful 
energy  firm  benchmark 
with  us  year  after  year? 


Our  new  generation  of  tools  dramatically  accelerates  the  data  collection  effort  that  precedes  a  typical 
benchmark  analysis.  So  you  can  focus  more  on  business  performance  strategies,  and  less  on  collecting  data. 


Entergy  saw  the  advantages.  And  as  a  result,  it  has  been  recognized  for  its  outstanding  performance  with 
awards  from  both  Gartner  and  SIG  (Sourcing  Interest  Group).  Get  the  full  story  at  gartner.com/entergy. 


To  find  out  what  we  can  do  for  you,  go  to  gartner.com/benchmarking  and  learn  how  to 
electrify  your  performance  through  measurement. 


When  you’re  ready  for  creative  solutions  for  all  your  business  needs, 
call  Gartner  Consulting  at  +1  203  964  0096. 

*  Gartner  benchmark  database,  the  most  credible  source  of  IT  performance  metrics  in  the  industry. 


Gartner 


©  2004  Gartner,  Inc.  and/or  its  affiliates.  All  rights  reserved. 
Gartner  is  a  registered  trademark  of  Gartner,  Inc.  or  its  affiliates. 


ODE 
TO  THE 


We  live  in  an  age  where  fearless  thinkers  are  transforming  the  way  we  live,  work  and  play. 
Organizations  are  realizing  that  the  true  power  of  their  information  is  unleashed  only  when  it 
is  readily  available,  not  safely  locked  away.  Business  leaders  are  learning  that  success  comes 
from  letting  their  people  do  what  they  do  best— wherever,  whenever  and  however.  That  having 
to  choose  between  protecting  information  and  making  it  available  is  a  choice  from  the  past. 
That  real  security  is  an  open  door,  not  a  closed  one.  That  when  information  has  no  limits, 
followers  become  leaders  and  leaders  become  pioneers.  This  is  the  new  world.  And  in  this 
world,  the  ones  who  are  fearless  are  the  ones  who  will  lead. 


www.information-integrity.com/ode 


Symantec  and  the  Symantec  logo  are  U.S.  registered  trademarks  of  Symantec  Corporation.  Copyright  ©  2004  Symantec  Corporation.  All  rights  reserved. 
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Edited  by  Megan  Santosus 


INFORMATION  SECURITY 

Government  Can’t  Mandate 
Security,  Panel  Says 

Now  is  not  the  time  for  the  U.S.  government  to  mandate  cyberse¬ 
curity  standards  to  private  industry,  despite  significant  threats  and  a  lack 
of  understanding  by  many  company  executives.  So  concluded  a  panel  of 
government  officials  that  met  to  discuss  the  issue  in  September. 

The  panel  of  cybersecurity-focused  officials— part  of  a  discussion  in 
Washington,  D.C.,  on  whether  government  and  private  industry  are  doing 
enough  to  protect  confidential  information— agreed  that  cybersecurity 
mandates  were  not  the  right  way  to  encourage  private  companies  to  adopt 
cybersecurity  best  practices.  Instead  of  a  so-called  stick  approach,  the 
U.S.  Congress  could  instead  develop  some  “carrot"  incentives  for  compa¬ 
nies  looking  to  upgrade  their  cybersecurity  efforts,  according  to  Bob  Dix, 
staff  director  of  the  technology  and  information  policy  subcommittee  of 
the  U.S.  House  of  Representatives  Committee  on  Government  Reform. 

The  subcommittee  is  considering  several  incentives  for  cybersecurity 
efforts,  including  an  investment  tax  credit  and  a  limit  on  liability  for 
companies  adopting  cybersecurity  best  practices,  Dix  said.  A  liability 
limit  could  include  an  exemption  from  U.S.  Federal  Continued  on  Page  22 


WI-FI  NETWORKING 


Philly  s  Big  Plans  for  Wireless 


In  September,  the  city  of  Philadelphia 
announced  its  plans  to  invest  in  a  new  wire¬ 
less  mesh  network  based  on  the  current 
Wi-Fi  802.  lib  standard.  By  deploying 
Wi-Fi  antennae  on  streetlights  and  other 
traffic  control  devices,  city  officials  hope 
they  can  turn  all  135  square  miles  of 
Philadelphia  into  the  world’s  largest  wire¬ 
less  Internet  hot  spot,  according  to  a  press 
release  on  the  city’s  website. 

Between  8  and  16  Wi-Fi  antennae  will 
be  needed  per  square  mile  in  Philadelphia, 


depending  on  the  topography  and  buildings 
in  the  area,  according  to  the  city.  The  plan 
is  to  connect  these  units  and  create  a  self¬ 
organizing  and  self-healing  wireless  mesh 
network.  The  city  estimates  the  Wi-Fi 
network  can  be  deployed  for  $40,000  to 
$60,000  per  square  mile,  for  a  total  cost 
of  between  $7  million  and  $10  million. 

City  officials  aim  to  complete  their  plan 
by  early  December  and  send  out  RFPs  to 
vendors  in  February  2005. 

According  to  Dianah  Neff,  the  city’s 


At  Love  Park  in  Philadelphia,  CIO  Dianah  Neff  (left)  and 
Mayor  John  F.  Street  (far  right)  launch  the  Wi-Fi  network. 

CIO,  Mayor  John  F.  Street  has  three  goals 
for  the  network:  to  vitalize  neighborhood 
economies,  to  eliminate  the  digital  divide 
and  to  bolster  public  safety. 

“From  my  perspective  as  a  CIO,  this  is 
one  of  those  projects  that  doesn’t  come  along 
all  that  often,”  says  Neff,  who  reports  to 
Street.  “We’re  implementing  technology 
that  meets  every  single  one  of  my  boss’s  goals.  ” 

-John  Blau 
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KONICA  MINOLTA 


“NOW  OUR 


Andy  Fowler,  CIO 
Methodist  Healthcare 


Konica  Minolta’s  document  management  and  distribution 
solutions  help  the  country’s  third  largest  healthcare  system- 
connect  people,  workflow  and  information  across  multiple  locations. 

“Methodist  Healthcare  needed  a  more  efficient  way  to  print  and  distribute  our  millions  of  schedules,  forms, 
patient  invoices  and  other  documents.  Konica  Minolta  had  the  solution.  Their  printers  doubled  our  capacity, 
saving  us  sizeable  dollars  in  capital  replacement  costs  over  the  original  machines.  Our  new,  de-central ized 
print-and-deliver  process  gets  the  right  document  to  the  right  location,  from  any  of  our  widespread  offices. 
And  the  best  part  is  we  are  also  saving  on  printing  and  manual  delivery  costs." 


There’s  more  to  the  story.  Get  the  details  at  www.bizhub.biz/health. 

Or  call  1-866-767-9200  for  more  information  and  the  complete  case  history. 


*  based  on  admissions 


Copyright  ©2004  Konica  Minolta  Business  Solutions  U.S.A.,  Inc. 
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KNOWLEDGE  MANAGEMENT 

Federal  Agencies 
Ran  Boost  in 
KM  Spending 

The  gaps  in  information  gathering,  processing  and  sharing 
among  federal  agencies  is  no  longer  a  dark  secret  thanks  to 
9/11.  Since  then,  market  research  company  Input  says  such 
gaps  have  been  the  primary  drivers  for  spending  on  knowledge 
management  systems.  Add  to  those  drivers  the  current  adminis¬ 
tration’s  IT  management  goals  that  call  for  improved  perform¬ 
ance  and  a  consolidation  of  redundancies,  and  Input  forecasts 
spending  on  KM-related  technologies  and  projects  will  increase 
from  $850  million  in  fiscal  year  2004  to  nearly  $1.1  billion  in 
fiscal  year  2009. 

Chris  Campell,  Input’s  senior  analyst  who  covers  the  federal, 
state  and  local  markets,  says  what’s  most  surprising  about  this 
year’s  forecast  is  that  the  Department  of  Homeland  Security 
no  longer  leads  the  way  in  terms  of  spending  projections.  He 
surmises  that’s  because  DHS  has  laid  the  foundation  for  its 
KM  efforts  while  the  top  spenders — starting  with  the  Office 
of  the  Secretary  of  Defense — are  now  “under  the  gun  to  meet 
the  mandate  of  the  president’s  IT  management  agenda.” 

-Megan  Santosus 


THE  TOP  10  AGENCIES  within  the  federal  government  in  terms 
of  current  and  future  KM  expenditures 


FY2004 

FY2009  (projected) 

Office  of  the 

Secretary  of  Defense 

S182M 

$253M 

Army 

$91M 

$124M 

Transportation 

$56M 

$71M 

Navy 

$51M 

$65M 

Justice 

$47M 

$66M 

Homeland  Security 

$46M 

$67M 

Air  Force 

$43M 

$63M 

State 

$36M 

$55M 

Health  and 

Human  Services 

$32M 

$44M 

NASA 

$31M 

$35M 

SOURCE:  Input 


Trade  Commission  (FTC)  actions  taken  against  companies  that 
adopt  best  practices  but  still  experience  a  security  compromise- 
such  as  hacker  intrusion— that  results  in  the  release  of  consumer 
data,  Dix  added. 

In  late  2003,  the  subcommit¬ 
tee  considered  legislation  that 
would  have  required  companies 
to  fill  out  a  cybersecurity 
checklist  in  theirfilings  with  the 
U.S.  Securities  and  Exchange 
Commission.  Even  though  Dix 
and  Chrisan  Herrod,  the  SEC’s 
chief  security  officer,  expressed 
concern  over  the  state  of 
cybersecurity  in  the  United 
States,  they  stopped  short 
of  advocating  government- 
defined  standards. 

Instead,  says  Dix,  best  practices  should  be  defined  by  private 
industry. 

However,  a  big  part  of  the  problem  is  there’s  not  general  agree¬ 
ment  on  which  cybersecurity  best  practices  should  become 
standards,  Herrod  said  at  the  panel.  In  terms  of  government 
mandates,  “we’re  not  there  yet,”  she  said,  adding  that  the  likeli¬ 
hood  of  getting  any  such  mandates  are  currently  slim.  “I  don’t 
think  it’s  possible  to  mandate  something  when  you  don’t  have 
agreement  on  what  that  something  is.” 

By  neglecting  to  come  up  with  best  practices,  the  government 
is  not  simply  shirking  its  responsibility;  one  industry  may  require 
different  standards  than  another  industry,  and  a  small  business 
may  have  different  cybersecurity  requirements  than  a  large 
business,  noted  Laura  DeMartino,  legal  adviser  for  Orson  Swindle, 
the  commissioner  of  the  FTC.  "A  broad  [government]  mandate 
may  not  be  needed  for  a  company  that  does  not  maintain 
sensitive  consumer  information,”  she  added. 

Still,  panelists  say,  many  business  executives  don’t  give  cyber¬ 
security  the  attention  it  deserves.  Many  CEOs  still  don’t  see  cyber¬ 
security  as  an  important  corporate  governance  issue,  Herrod  said. 
“We  would  love  to  see  information  assurance  and  information 
security  standards  as  part  of  corporate  governance,  but  not  in  the 
context  of  mandating  them— in  the  context  of  every  company  fol  low¬ 
ing  the  best  practices  they  can  possibly  put  in  place,”  she  said. 

In  an  interview,  the  FTC’s  DeMartino  says  that  despite  the  lack 
of  broad  government  mandates,  there  are  information  security 
guidelines  that  CIOs  may  find  useful.  The  Gramm-Leach  Bliley 
Safeguards  Rule,  which  specifically  targets  how  financial  institu¬ 
tions  protect  consumer  data,  includes  safeguards  for  informa¬ 
tion  security  that  CIOs  from  any  industry  would  do  well  to  follow, 
DeMartino  says.  Among  them:  Devise  a  written  plan  that  details 
how  to  protect  consumer  data;  conduct  a  thorough  risk  assess¬ 
ment  that  identifies  internal  and  external  vulnerabilities;  and 
design— and  test  periodically— a  plan  to  control  those  risks. 

-Grant  Gross 


Bob  Dix,  staff  director  of  the  technol¬ 
ogy  and  information  policy  subcommittee 
of  the  U.S.  House  of  Representatives 
Committee  on  Government  Reform 
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Your  business  challenges  change  over  time. 
Our  business  applications  adapt  every  time. 


Only  PeopleSoft  delivers  applications  to  fit  your  business  today  and  adapt  with  your  business  tomorrow. 


PeopleSoft  delivers  the  broadest  suite  of  enterprise  applications  to  more  than  11,000  customers  around  the  world. 
As  a  leader  in  25  specific  industries,  PeopleSoft  enables  customers  to  implement  best  practice  processes  across 
their  entire  organization.  And  empowers  them  with  the  solutions  with  the  lowest  total  cost  of  ownership,  and  the 
highest  rated  level  of  customer  satisfaction. To  find  out  more,  visit  www.peoplesoft.com  or  call  1  888  773  8277. 


PeopleSoft 


The  world's  most  flexible,  adaptable  software. 


Human  Capital 
Management 


Customer  Relationship 
Management 


Manufacturing 


Financial  Management 


Supplier  Relationship 
Management 


Copyright  ©  2004  PeopleSoft,  Inc.  All  rights  reserved. 
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SMART  CLOTHES 

What  the  Well-Dressed  CIO  Could  Be  Wearing 


They  say  you  can  tell  a  lot  about  a  person 
by  his  shoes.  With  your  new  ADIDAS 
SMART  SHOES,  people  will  suspect 
you’re  a  genius.  A  computer  chip  housed 
within  each  sneaker  modifies  the  fit  of 


Fashion  is  a  tricky  art  to  master.  Styles, 
fabrics,  colors— each  of  these  elements  of  the 
well-dressed  executive  can  change  indis¬ 
criminately,  leaving  you  looking  tacky  before 
you  can  say  “fashion  emergency.” 

CIOs  are  not  known  for  their  fashion  sense. 
Quite  the  opposite,  in  fact.  The  perception  of 
the  IT  top  dog  as  stylistically  inept  spawns  from 
age-old  images  of  tech  nerds  with  pocket 
protectors  and  high-riding  pants.  But,  as  with 
many  things,  technology  has  woven  itself  into 
the  very  fabric  of  tomorrow’s  fashions.  And 
who  better  to  make  wearable  technology  chic 
than  CIOs,  the  bellwethers  of  corporate  tech 
trends.  Here  are  a  few  garments  that  mingle 
hipness  with  technological  ingenuity. 

4  ,  .Jmmi  -Daniel  J.  Morgan 
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your  footwear  so  you  always  have  the 
perfect  running  shoe.  Located  in  the  arch 
of  the  smart  shoe,  a  40  gram  micro¬ 
processor  interprets  signals  sent  from 
magnets  and  sensors  throughout  the 
shoe.  The  chip  activates  a  compact 
motor  unit  that  adjusts  the  heel  cushion 
on  the  fly,  supposedly  giving  your  feet 
perfect  support  with  every  step. 


Hard  pressed  to  find  an  iron  before 
the  big  meeting?  CORPO  NOVA 
MANUFACTURES  SHIRTS 
WOVEN  WITH  TITANIUM  that 
react  to  a  rise  in  temperature  and 
literally  press  themselves.  The  shirt 
will  hold  its  form  when  bunched 
up,  and  flatten  out  when  hit  with  a 
blast  of  hot  air.  Simply  expose  the 
shirt  to  a  hair  dryer  or  a  warm 
summer  breeze,  and  the  ironing 
will  be  done  for  you. 


THE  TEC  SPORT  JACKET  BY 
SCOTTEVEST  looks  like  your  every¬ 
day  blue,  three-button  blazer.  But 
this  snappy  version  of  the  wardrobe 
stalwart  comes  equipped  with 
14  pockets,  each  in  sync  with  the 
next  via  a  Personal  Area  Network. 
Every  gadget  in  your  repertoire  has  a 
pocket  to  fit  in,  including  your  laptop. 
(Although  your  jacket  may  hang  a 
little  off-kilter  when  packing  your 
PC.)  A  series  of  slots  around  the 
collar  allow  the  wearer  to  fasten 
headphones  around  the  neck  for 
easy  listening  during  downtime. 


It  used  to  be  that  your  body  had 
an  odor  all  its  own.  But  with 
STATE-OF-THE-ART  AROMA 
TECHNOLOGY  BY  SCENTOR- 
GAN,  your  dress  will  decide  the 
sweet  smells  you  emit.  Using  a 
network  of  tubing  and  a  heart- 
mimicking  pump,  the  ScentOrgan 
dress  acts  as  an  artificial  gland 
and  sprays  scents  along  the  body 
where  it's  needed  most.  The 
fragrant  sprays  are  engineered  to 
stimulate  a  sense  of  well-being 
for  the  wearer— not  to  mention 
pleasant  scents  for  passers-by. 
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Consider  the  dots  connected.  Supported  by  a  new,  dedicated  ATM  network  we 
designed,  delivered  and  now  manage,  Huntington  National  Bank  launched  a  series 
of  cutting-edge  applications  that  improved  customer  satisfaction.  Which  is  directly 
related  to  another  benefit  of  the  more  powerful  network-scalability  as  the  bank 
continues  to  grow  and  prosper.  Find  out  more  about  how  we’re  helping  Huntington 
National  Bank  connect  the  dots  at  sbc.com/dots.  GOING  BEYOND  THE  CALL? 

BEYOND  THE  CALL  are  registered  trademarks  o!  SBC  Knowledge  Ventures,  L.P.  and/or  its  affiliates.  ©2004  SBC  Knowledge  Ventures.  L.P.  All  rights  reserved. 
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Web  Services  Gains  Momentum 


For  early  adopters,  Web  services  delivers  promising  results 


The  early  returns  on  web  services 
are  in:  Businesses  have  clearly  endorsed 
the  technology  and  are  looking  to  do  more 
with  Web  services  in  the  near  future. 
According  to  a  recent  survey  of  437  enter¬ 
prises  by  the  Yankee  Group,  48  percent  of 
respondents  have  already  deployed  Web 
services  and  another  39  percent  expect  to 
deploy  the  technology  within  a  year.  Most 


companies  surveyed  (71  percent)  said  they 
planned  to  increase  spending  on  Web 
services  in  2005.  Siew-Joo  Tan,  a  senior 
analyst  at  Yankee  Group,  says  Web  services 
is  mature  enough  at  this  point  for  compa¬ 
nies  to  seriously  consider  it.  "Web  services 
technology  is  so  compelling  that  most 
companies  should  at  least  try  it  and  see  if  it 
lives  up  to  its  promises,”  says  Tan. 


Early  adopters  say  that  Web  services  has 
allowed  them  to  enhance  collaboration 
with  business  partners,  reduce  complexity 
in  distributed  applications,  drive  increased 
revenue  for  their  business  and  lower 
application  development  costs.  The 
downside,  according  to  the  survey,  is 
security.  Extending  systems  to  your  part¬ 
ners  and  customers  adds  a  layer  of  risk. 
Security  was  listed  as  the  top  concern  for 
72  percent  of  respondents. 


Web  services  is 
becoming  ubiquitous. 


71%  of 


People  who  have  deployed 
Web  services  say  it... 


39%  plan  \ 
to  deploy 
Web  services 

within  12 
v  months 


48%  already 
have Web 
services 
deployed 


8%  plan  to  deploy  Web  services 

within  24  months 


Total  adds  up 
to  more  than 
100  percent 
because  of 
rounding. 


6%  have  no  plans  to  use 
Web  services 


companies  will 
increase  their 
|  spending  on 
Web  services 


enhances  my  organization’s  ability  to  collaborate 
with  external  partners  (77%  agree) 


has  reduced  complexity  in  distributed  applications 
(66%  agree) 


will  drive  increased  revenue  in  my  organization  within 
two  years  (66%  agree) 


in  2005. 


has  lowered  development  costs  (58%  agree) 


Respondents  could  agree  to  more  than  one  question. 
SOURCE:  The  Yankee  Group 


Best  Practices 

Play  catch-up  if  you’re  not  already  in  the  game. 

If  your  company  hasn't  piloted  Web  services 
yet,  now  is  the  time  to  do  so.  Failing  to  recognize 
the  benefits  of  Web  services  could  threaten 
your  organization’s  competitive  stance. 


Put  security  risks  in  perspective.  Security 
is  an  important  issue  that  companies 
shouldn’t  overlook,  but  it  should  not  stop 
an  enterprise  from  deploying  Web  services. 
Weigh  the  potential  risks  against  the  rewards 
of  Web  services  and  take  action  to  mitigate 
the  risks. 


Consider  the  Web  services  capabilities  of 
your  software  vendors.  At  the  very  least, 
inquire  about  the  vendor’s  Web  services 
strategy.  Buying  packaged  software  designed 
using  service-oriented  architecture  makes 
the  transition  to  Web  services  easier  and 
reduces  the  cost  of  integration. 
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30, 000,000  PEOPLE  SHARE 


INFORMATION  WIRELESSLY  THE 
QUESTION  IS,  WITH  WHOM? 


At  NEC,  we  have  over  thirty  years  of  experience  in  protecting  sensitive  data  through  the  development  and 
implementation  of  biometric  identification  and  authentication  systems.  Add  to  that  our  proven  expertise  in  IT 
networking,  enhanced  data  encryption  and  secure  wireless  technologies  and  you  have  the  tools  your  company  needs 
to  survive  in  today’s  mobile  environment.  So  you  can  rest  assured  that  your  private  information  won’t  become 
public.  It’s  one  more  way  NEC  empowers  people  through  innovation,  www.necus.com/security  1-800-338-9549 


IT  SERVICES  AND  SOFTWARE  ENTERPRISE  NETWORKING  AND  COMPUTING  SEMICONDUCTORS  IMAGING  AND  DISPLAYS 


©NEC  Corporation  2004.  NEC  and  the  NEC  logo  are  registered  trademarks  of  NEC  Corporation 
Empowered  by  Innovation  is  a  trademark  of  NEC  Corporation. 


Empowered  by  Innovation 


trendlines 


ONLINE  MANUFACTURING 

Machine  Shop  Dreams 


At  first  glance,  eMachine 
Shop.com  sounds  like  a  relic  from 
the  dotcom  days  of  the  late  ’90s.  But 
unlike  so  many  of  the  dotcom  fail¬ 
ures,  this  website  actually  makes 
something  tangible.  Using  special¬ 
ized  CAD  software  developed  by 
eMachineShop.com,  users  can  cus¬ 
tom-design  machine-made  parts  for 
almost  anything — from  ordinary 
objects,  such  as  bicycle  parts,  all  the 
way  up  to  a  vacuum  spectrum  ana¬ 
lyzer  magnet  assembly.  Jim  Lewis, 
president  of  eMachineShop.com, 
says  that  the  normal  process  of 
making  technical  drawings,  locat¬ 
ing  a  machine  shop,  delivering  the 
drawings  to  that  shop,  negotiating 
a  price  and  getting  the  part  can  take 
weeks.  At  eMachineShop.com, 
initial  contact  to  placing  an  order  can 


take  just  15  minutes,  Lewis  says. 

Lewis  may  be  onto  something. 
Roger  Jordan,  president  and  direc¬ 
tor  of  R&D  at  Tanabyte  Engineer¬ 
ing,  says  his  company  turned  to 
eMachineShop.com  when  it  started 
designing  a  new  generation  of  air- 
pollution  monitoring  equipment. 
“Using  their  service,  we  are  able  to 
make  much  more  elaborate  machined 
parts  at  a  competitive  cost,”  says 
Jordan.  “I  also  like  the  ability  to 
perform  detailed  cost  analysis  at 
my  desk  for  each  step  of  the  design 
process  without  the  need  to  wait 
for  formal  quotes.”  Quick  pricing 
is  made  possible  by  a  feature  built 
into  the  software.  And  Jordan  esti¬ 
mates  that  eMachineShop.com’s 
price  quotes  are  about  20  percent 
less  than  quotes  he  gets  from  tradi¬ 


tional  machine  shops. 

Another  advantage  as  Lewis 
sees  it:  ease  of  use.  Users  down¬ 
load  the  free  CAD  software  from 
the  site,  and  while  designing,  the 
software  analyzes  the  shape,  mate¬ 
rial  and  finish  of  the  product,  and 
automatically  informs  the  user  of 
any  limitations  of  the  design.  For 
example,  engineers  may  design 
holes  in  a  piece  of  sheet  metal  that 
are  too  small  for  laser  cutting — 
the  smallest  holes  depend  on  the 
sheet’s  thickness.  “Even  engineers 
who  know  the  rules  may  not  want 
to  take  the  time  to  do  the  calcula¬ 
tions,”  Lewis  says.  Customers 
range  from  hobbyists  to  NASA. 
While  he  won’t  reveal  revenue, 
Lewis  says  eMachineShop.com 
is  growing. 

Hopefully  for  him,  the  bubble 
won’t  burst  anytime  soon. 

-Thomas  Wailgum 


ENTERPRISE  RISK  MANAGEMENT 


When  the  Committee  of 

Sponsoring  Organizations  of  the 
Treadway  Commission  (better 
known  as  COSO)  released  its 
framework  on  internal  control 
in  1992,  committee  members 
had  no  idea  how  the  document 
would  take  off.  But  take  off  it 
did.  When  legislators  passed 
the  Sarbanes-Oxley  Act  of  2002, 
they  cited  the  framework  as 
an  example  of  the  controls 
companies  could  use  to  prevent 
fraudulent  financial  reporting. 
COSO’s  “Internal  Control- 
Integrated  Framework”  became 
an  instant  hit  with  the  Sarbox 
crowd,  one  that  was  inexorably 
linked  to  compliance  with 
sections  404  and  302.  Now, 
COSO  has  released  a  document 
focused  on  risk  management. 

“Enterprise  Risk  Manage¬ 
ment-Integrated  Framework" 
is  a  much-deliberated,  long- 


i  A  New 
i  Guide  to 

awaited  document  that 
describes  the  components  of 
determining  how  much  risk  an 
organization  can  and  should 
accept.  “ERM  provides  a  com¬ 
prehensive  way  for  companies 
to  avoid  surprises,”  contributor 
Rick  Steinberg  told  the  crowd  at 
a  media  release  event  in  mid¬ 
town  Manhattan  in  late  Septem¬ 
ber.  “That’s  the  bottom  line.” 

Right  now,  according  to 
Steinberg  and  others,  compa¬ 
nies  look  at  risk  in  an  informal, 
ad  hoc  way.  Members  of 
COSO— a  voluntary  group  that 
comprises  five  financial  and 
accounting  organizations— 
believe  companies  that  put 


<»*••••«• 


more  thought  into  risk  will  be 
able  to  add  to  their  bottom 
lines.  The  framework  puts  risk 
into  four  categories— strategic, 
operations,  reporting  and 
compliance— and  emphasizes 
the  need  for  companies  to 
decide  whether  to  avoid, 
accept,  reduce  or  share  each 
of  these  risks.  It  also  aims  to 
give  employees,  from  entry- 
level  ones  up  to  the  CEO,  a 
common  language  for  dis¬ 
cussing  these  risks. 

Committee  members  stress 
that  the  new  risk  management 
framework  builds  upon— and 
does  not  replace— the  internal 
control  framework  that  compa¬ 


nies  are  using  for  Sarbanes- 
Oxley  compliance. 

So  what  does  all  this  mean 
for  CIOs?  Obviously,  IT  systems 
contain  their  own  sets  of  risks 
and  rewards  that  can  be  evalu¬ 
ated.  More  than  that,  however, 
CIOs  whose  companies  decide 
to  adopt  the  framework  may 
be  called  upon  to  make  timely 
information  about  risk  available 
to  other  executives, 

Since  Sarbox  cited  COSO’s 
internal  control  framework, 
companies  were  forced  to  pay 
attention  to  it.  That’s  not  the 
case  with  the  ERM  framework, 
so  it  remains  to  be  seen  whether 
this  new  document  will  take  off 
in  quite  the  same  way. 

A  free  executive  summary 
is  available  at  www.coso.org, 
where  visitors  can  also  pur¬ 
chase  the  two-volume  set 
for  $75.  -Sarah  D.  Scalet 
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Samsung’s  193P  display. 

You  have  a  place  called  home,  but  thj^-is  where  you  live.  So  live  well, 
with  our  ultra-refined,  193P  display.Trgonomically  designed  to  move 
like  you  move,  it’s  yet  another  example  why  we’ve  won  over  67  design 
awards  worldwide.  And  why,  at  Samsung,  we  engineer  our  monitors 
to  fit  the  people  who  use  them. 


19"  Analog/Digital  TFT- LCD 
Full  pivot,  tilt  and  swivel;  wall  mountable 
178°/178°  —  Widest  viewing  angle  of  any  LCD 
MagicTune™  on-screen  image  control 


■Visit  www.samsungusa.com/monitor  or  call  1-800-SAMSUNG 


V 


©2004  Samsung  Electronics  America,  Inc.  Samsung  and  MagicTune  are  registered  marks  of  Samsung  Electronics  Corp.,  Ltd.  Screen  images  simulated. 
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Plan  for  Wireless  411 
Directory  Prompts 
Privacy  Bill 

Legislation  would  require  carriers  to  get 
permission  for  listings 


Sens.  Arlen  Specter  (R- 
Pa.),  left,  and  Barbara 
Boxer  (D-Calif.),  right, 
sponsored  the  Wireless 
411  Privacy  Act. 


n 


Congress  has  begun 
debating  a  bill  that  would  lay 
out  the  ground  rules  for  an 
industry-backed  directory  of 
wireless  phone  numbers  analo¬ 
gous  to  the  existing  411  direc¬ 
tory  assistance  service  for  land 
lines.  In  particular,  the  legisla¬ 
tion  aims  to  define  the  right  of 
cell  phone  customers  to  keep 
their  numbers  private. 

Consumer  advocates  and 
some  business  executives  are 
concerned  that  numbers  in 
the  directory,  which  is  being 


developed  by  most  of  the  major 
wireless  carriers  for  deploy¬ 
ment  next  year,  could  be  sold, 
shared  with  third  parties  or 
hacked.  For  these  reasons,  the 
nation’s  largest  carrier,  Verizon 
Wireless,  will  not  participate  in 
the  directory.  “If  you  make  a  list, 
a  list  can  get  out,"  says  Verizon 
spokesman  Jeffrey  Nelson. 

In  September,  the  Senate 
Commerce,  Science  and 
Transportation  Committee 
voted  12-10  to  pass  the  Wire¬ 
less  411  Privacy  Act,  sponsored 


by  Sens.  Arlen  Specter  (R-Pa.) 
and  Barbara  Boxer  (D-Calif.). 

It  would  require  carriers  to 
obtain  permission  from  cus¬ 
tomers  to  include  their  cell 
phone  numbers  in  a  directory 
assistance  database.  The 
carriers  looking  to  create  the 
database— Alltel,  AT&T  Wire¬ 
less,  Cingular  Wireless,  Nextel 
Communications,  Sprint  PCS 
and  T-Mobile  USA— say  they 
already  plan  to  ask  for  such 
permission,  which  is  why  many 
senators  voted  against  the  bill. 
Analysts  project  $2  billion  in 
annual  revenue  to  the  carriers 
from  fees  charged  to  individu¬ 
als  who  call  the  directory. 

The  directory  would  include 
the  numbers  of  corporate 
supplied  cell  phones,  yet  not 


every  business  wants  its 
employees’  phone  numbers 
made  available.  Roy  Swack- 
hamer,  vice  president  and  CIO 
for  logistics  company  CNF,  says 
he  will  not  include  any  ofthe 
company’s  8,000  to  9,000  cell 
phone  numbers  in  the  directory. 
Swackhamer  worries  about 
trying  to  police  unwanted 
phone  calls  to  employees  and 
about  controlling  information 
that  employees  give  to  callers. 

Greg  Keene,  chief  privacy 
officer  for  Qsent,  an  identity 
validation  firm  hired  by  the 
carriers  to  build  the  directory, 
says  that  to  protect  cell  phone 
users’  privacy,  no  hard  copies 
of  the  directory  will  be  printed, 
nor  will  it  be  posted  on  the  Web 
or  provided  to  telemarketers. 

It  will  fall  to  CIOs  with 
responsibility  for  telecommuni¬ 
cations,  such  as  Swackhamer, 
to  devise  and  execute  a  policy 
for  listing  their  company’s  cell 
phone  numbers.  In  addition, 
privacy  advocates  tell  CIOs  that 
a  good  course  of  action  will 
include  monitoring  whether 
numbers  stay  off  the  list. 

-Allan  Holmes 


Learn  More 


Get  the  CIO  recap  on  the  ELECTION— 
what  it  means  to  you— at 

www.comment.cio.com/weighin. 

Get  the  latest  on  SARBANES-OXLEY 
deadlines  at  www.cio.com/sarbanes 

cio.com 


Court  Decision  Makes  Fighting  Patent  Claims  Less  Costly 

Judges  eliminate  paperwork  to  refute  infringement  allegations 

A  Sept.  13  decision  by  the  U.S.  Court  of  Appeals  for  the  Federal  Circuit,  should  make  it  easier  for  CIOs  to 
avoid  patent-infringement  suits  by  software  companies. 

The  decision  in  the  case  Knorr-Bremse  Systeme  vs.  Dana  Corp.  and  Haldex  Brake  Products  reversed  a 
longtime  precedent  that  presumed  a  company  was  guilty  of  violating  a  patent  unless  its  lawyer  filed  a  letter 
certifying  its  innocence.  Getting  a  lawyer  to  write  such  a  letter  is  expensive:  around  $80,000,  says  Michael 
Smith,  a  patent  lawyer  with  Ivey,  Smith  &  Ramirez.  Haldex,  a  brake  manufacturer,  and  Dana,  its  distributor, 
challenged  the  precedent  after  Knorr-Bremse  sued  them  for  violating  its  patent  on  an  air  brake  design. 

IT  departments  are  typically  sued  for  patent  violations  when  an  application  developed  in-house  resem¬ 
bles  a  commercial  software  product.  Most  of  the  time,  estimates  Smith,  any  infringement  is  accidental. 

Now,  however,  the  burden  of  proof  has  shifted  to  the  accuser,  which  won’t  be  able  to  win  in  court  unless 
it  can  prove  its  charges— for  instance,  by  providing  a  defendant’s  e-mails,  acknowledging  that  the  system  is 
a  knockoff.  That  means  CIOs  whose  shops  write  custom  software  won’t  be  forced  to  settle  frivolous  infringe¬ 
ment  claims  and  won’t  lose  their  shirts  before  they  even  get  to  court.  -Ben  Worthen 
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WE’RE  PUTTING  COMPUTER 
R&D  WHERE  IT  BELONGS. 

-  In  your  Business .  - 


Dancing  robots  and  Artificial  Intelligence  make  great  press 
release  material,  but  what  exactly  do  they  do  to  improve 
your  business? 

At  Fujitsu,  we’re  concerned  with  R&D  that  helps 
CIOs  run  their  business  more  efficiently.  In  fact,  we  invest 
billions  of  dollars  annually  in  developing  technology  solu¬ 
tions  and  providing  the  right  products  for  our  customers 
to  achieve  maximum  enterprise  performance.  This  R&D 
effort  is  the  foundation  of  the  Fujitsu  PRIMEPOWER" 
and  PRIMERGY®  server  lines,  which  deliver  mission-critical 
reliability,  availability  and  serviceability. 

Thanks  to  our  real-world  R&D  philosophy,  we’ve 
become  a  company  that  offers  CIOs  the  high-performance 
mobile  computers,  scalable,  reliable  servers,  and  managed 
and  professional  services  they  need. 

If  you  are  looking  for  an  IT  partner  whose  R&D 
investment  actually  does  your  company  some  good,  visit 
us.fujitsu.com/computers/RD  or  call  1-800-831-3 183. 


FUJITSU 

THE  POSSIBILITIES  ARE  INFINITE 


©2004  Fujitsu  Computer  Systems  Corporation.  All  rights  reserved.  Fujitsu,  the  Fujitsu  logo  and  LifeBook.  are  registered  trademarks  of  Fujitsu  Limited.  PRIMEPOWER  is  a  trademark  or  registered  trademark,  of 
Fujitsu  Limited  in  the  United  States  and  other  countries.  Sylistic  »s  a  registered  trademark  of  Fujitsu  Computer  Systems  Corporation.  PRIMERGY  is  a  registered  trademark  of  Fujitsu  Siemens  Computers  GmbH. 


Where  IP  and  telecom  unite. 


Where  security  is  offensive,  not  defensive. 
Where  e-commerce  is  safe  commerce. 
Where  content  is  mobile  and  personal. 


Where  infrastructure  is  more  intelligent. 


Billions  of  times  each  day,  the  world  interacts  with  a  company  you  may  not  realize  is  there.  One  that  is  driving  dynamic  transformations  at  the 
very  core  of  commerce  and  communications.  VeriSign."  Through  our  Intelligent  Infrastructure  Services,  we  enable  businesses  and  individuals  to 
find,  connect,  secure,  and  transact  across  today’s  complex  Internet,  telecom,  and  converged  networks.  We  operate  the  systems  that  manage 
.com  and  .net,  handling  14-billion  Web  addresses  and  emails  every  day.  We  run  one  of  the  largest  telecom  signaling  networks  in  the  world, 
enabling  services  such  as  cellular  roaming,  text  messaging,  caller  ID,  and  multimedia  messaging.  We  manage  network  security  services  for 


'  2004  VeriSign,  Inc.  All  rights  reserved.  VeriSign,  the  VeriSign  logo,  "Where  it  all  comes  together,"  and  other  trademarks,  service  marks, 
and  designs  are  registered  or  unregistered  trademarks  of  VeriSign  and  its  subsidiaries  in  the  United  States  and  in  foreign  countries. 


3,000  global  businesses.  And  we  handle  over  30  percent  of  all  e-commerce  transactions  in  North  America,  amounting  to  $100-million  in  daily 
sales.  As  next-generation  networks  emerge  and  converge,  VeriSign  will  be  there,  deploying  the  Intelligent  Infrastructure  Services  necessary  for 
everything  from  RFID-enabled  supply  chains  to  inter-enterprise  VoIP  to  mobile  and  rich  media  content  distribution.  Whether  you’re  a  telecom 
carrier  looking  to  rapidly  deploy  new  services;  a  Fortune  500  enterprise  needing  comprehensive,  proactive  security  services;  or  an  e-commerce 
leader  wanting  to  securely  process  payments  and  reduce  fraud,  we  can  help.  We're  VeriSign.  Where  it  all  comes  together.’” 


www.VeriSign.com 

Download  now:  Free  white  paper  on  Intelligent  Infrastructure  Services 
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By  Martha  Heller,  Director,  CIO  Executive  Council 
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Eight  Best  Practices 
for  Disaster  Recovery 

Three  members  of  the  CIO  Executive  Council  offer  their  advice 
on  building,  testing  and  deploying  disaster  recovery  plans 

GIVEN  THE  NUMBER  OF  BLACKOUTS,  hurricanes  and  other  disasters  that  have  come  our  way 
over  the  past  few  years,  many  CIOs  are  wisely  reexamining  their  disaster  recovery  strategies. 
Executive  Council  members  share  some  of  their  tried-and-true  methods. 


TQPof  MiND _ 

THE  COUNCIL  HAS  BEEN 
DISCUSSING... 

Workforce:  BPM  and  project 
management  skills  wanted 

Web  services:  Too  many  stan¬ 
dards,  too  little  integration 

SAP:  Global  rollouts,  upgrades 
and  centers  of  excellence 

Resource  allocation:  Growing 
project  demands  and  flat  budgets 

Vendor  consolidation:  One  is 

often  better  than  many 

Editor’s  Note:  The  CIO  Executive 
Council  is  a  professional  organiza¬ 
tion  for  CIOs.  Its  mission  is  to  lever¬ 
age  the  strengths  of  a  large  coalition 
of  CIOs  for  the  purpose  of  achieving 
change  within  our  organizations  and 
shaping  the  framework  for  the  future 
of  IT.  For  more  information  about 
the  council,  go  to  www.cioexecutive 
council.com. 


1  DEDICATE  AND  EMPOWER  STAFF.  At  the 

New  York  Mercantile  Exchange  (NYMEX), 
CIO  Sam  Gaer  has  dedicated  a  department 
within  IT  to  manage  business  continuity  plan¬ 
ning  and  disaster  recovery.  Gaer  ensures  that 
the  department’s  leader  has  access  to  upper- 
level  management  by  running  interference. 
“You  can’t  just  set  up  a  director  and  a  depart¬ 
ment  and  let  them  run  on  their  own,”  he  says. 
“The  CIO  must  pay  constant  attention  to  this 
department  and  set  of  resources.” 

DIVIDE  AND  CONQUER.  In  order  to  ensure 
business  involvement  in  the  development 
and  maintenance  of  the  business  continuity 
plan,  Martin  Gomberg,  CTO  of  A&E  Televi¬ 
sion  Networks,  has  separated  business  conti¬ 
nuity  planning  and  disaster  recovery  into  two 
initiatives,  each  with  its  own  governance  and 
goals.  For  disaster  recovery,  the  goal  is  techni¬ 


cal  recovery,  and  the  plan  is  created  and  man¬ 
aged  by  developers  and  engineers.  Business 
continuity’s  goal  is  business  process  stability, 
and  that  plan  is  developed — in  partnership 
with  IT — by  business  unit  representatives. 

3  MAKE  SURE  THE  PLAN  CAN  STAND 
ALONE.  “When  a  disaster  strikes,  the  staff 
who  wrote  the  recovery  plan  may  not  be 
available  to  execute  it,”  says  Greg  Smith,  vice 
president  and  CIO  of  the  World  Wildlife 
Fund  (WWF).  “You  have  to  make  sure  your 
disaster  recovery  plan  will  work  with  or  with¬ 
out  the  internal  key  people  who  developed 
it.”  If  the  director  in  charge  of  financial  ERP 
applications  wrote  the  plan,  for  example, 
ask  the  business  intelligence  manager  to  test 
the  recovery. 

CHALLENGE  THE  BUSINESS.  “If  business 
unit  managers  tell  me  they  need  an 
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theExchange 


application  recovered  quickly,  but  that  appli¬ 
cation  is  not  providing  revenue  generation  or 
financial  compliance,  I  will  challenge  those 
individuals  to  think  hard  about  how  long  they 
can  really  go  without  that  application,”  says 
Smith.  The  same  goes  for  staffing  an  offsite 
facility  during  a  disaster.  Determining  the  right 
people  to  involve — as  well  as  the  right  services 
to  recover — is  part  of  the  negotiation  process. 

5  ALIGN  DISASTER  RECOVERY  WITH 
APPLICATION  DEVELOPMENT.  At  A&E, 
the  IT  team  incorporates  disaster  recovery  into 
its  application  development  processes.  “We’ve 
developed  an  isolated  test  environment  that 
enables  full-time  access  and  continuous  test¬ 
ing  of  all  systems  and  applications,”  says 
Gomberg.  “Our  business-continuity  database 
includes  a  report  on  application-testing  status, 
so  we  know  when  a  system  was  last  tested  and 
whether  it  demands  our  attention  to  assure  its 
performance  in  recovery.” 

6  TABLETOP  TESTS  WON’T  CUT  IT.  Regu¬ 
larly  reviewing  your  plan  on  paper  is  impor¬ 
tant,  says  Gaer,  but  it  is  not  enough.  In  addition 
to  tabletop  tests,  Gaer  semiannually  springs 
mock  disasters  on  his  crisis  management  team, 
which  is  made  up  of  staff  and  board  members, 
who  must  set  up  a  replica  data  center  so  that  it  is 
operational  within  a  few  hours.  “Given  how 
busy  our  board  members  are,  it  is  not  easy  to 
demand  their  participation  in  these  tests,”  says 
Gaer.  “But  their  participation  is  extremely 
important  and  is  a  testament  to  NYMEX’s 
dedication  to  disaster  recovery.” 


7  TRY  (AND  TEST)  BEFORE  YOU  BUY. 

When  WWF’s  Smith  was  looking  at  a  new 
technology  for  creating  systems  images  (snap¬ 
shots  of  the  operating  system  disk  and  registry 
settings  that  allow  for  a  relatively  simple  recov¬ 
ery  process),  not  only  did  he  employ  a  “try 
before  you  buy”  approach,  he  actually  used 
the  product  in  a  test  at  no  charge.  “  It  was  a  real 
test:  entirely  offsite  with  a  different  network, 
firewall  and  environment,”  he  says. 

8  HOLD  POSTMORTEMS  AND  ADJUST. 

What  you  do  with  the  results  of  the  test  is 
a  critical  part  of  disaster  recovery  planning.  “If 
you  are  recovering  without  third-party  ser¬ 
vices,  create  an  action-item  checklist  out  of 
your  review  of  what  worked  well  and  what 
didn’t,”  says  Smith.  “If  you  are  working  with 
a  vendor,  document  what  went  wrong  and  use 
that  report  to  outline  your  expectations  for  the 
next  test.” 


THE  CASE 


Managing  employee  performance,  post  M&A 


COUNCIL  MEMBER:  Jeri  Dunn,  CIO,  Tyson  Foods 
The  Challenge  » 

When  CIO  Jeri  Dunn  was  hired,  11  months  after  Tyson  Foods  acquired  IBP  Fresh 
Meats,  the  company  still  had  two  separate  IT  departments.  Dunn  had  to  consoli¬ 
date  the  two  groups  into  one  and  reduce  the  number  of  employees— a  challenge 
because  she  was  new  and  did  not  know  the  strengths  and  weaknesses  of  either 
IT  organization.  During  the  consolidation,  she  found  another  problem:  a  history 
of  poor  management  in  both  IT  organizations. 

Dunn  began  with  her  nine  direct  reports  (where  she  had  duplicates  of  every 
senior-level  position)  by  defining  the  IT  process  of  the  combined  organization 
and  what  high-level  positions  were  needed  to  support  that  process.  The  team 
members  then  reapplied  for  their  jobs.  By  September  2002,  with  the  pared- 
down  core  group  in  place,  Dunn  charged  each  with  consolidating  his  depart¬ 
ment.  To  do  that,  Dunn  and  her  team  instituted  a  “match”  system:  Employees 
could  apply  for  several  jobs  and  rank  their  job  preferences.  Hiring  managers, 
meanwhile,  would  rank  the  top  three  candidates  for  each  open  position. 

At  the  end  of  the  three-month  matching  process,  Dunn  had  a  list  of  positions 
that  managers  could  not  find  anyone  to  fill  and  a  list  of  employees  whom  nobody 
wanted  to  hire.  "That  was  an  eye-opener,”  Dunn  says.  “I  had  managers  who  did  not 
want  to  deliver  bad  news  and  were  not  managing  performance.” 

Dunn  also  had  a  potential  legal  problem  on  her  hands.  “I  wanted  to  hire  new 
people  to  fill  the  positions,  but  I  couldn’t,”  she  says.  “You  can’t  just  let  someone 
go  without  documentation.” 

The  Execution  » 

Dunn  instituted  performance  ranking,  giving  her  managers  targets:  25  percent 
of  employees  could  be  "above  average,"  10  percent  could  be  “below  average," 
and  the  rest  would  be  ranked  “meets  expectations.”  She  made  one  crucial 
distinction  to  managers:  If  the  reviews,  en  masse,  did  not  fall  exactly  into  a  bell 
curve,  she  was  not  going  to  force  them  to  fit  into  one. 

Once  the  rankings  were  set,  managers  gave  all  employees  development 
plans,  encouraging  them,  for  example,  to  take  a  class  on  leading  meetings  or  to 
shadow  a  salesperson.  Employees  who  could  someday  step  into  Dunn's  role 
were  slated  for  succession  planning.  Talented  employees  who  had  excelled  in 
every  job  they  had  in  the  company  were  identified  as  high-potential  employees. 

The  new  performance  rankings  showed  the  role  models  and  the  laggards.  In 
addition  to  being  fair  and  consistent,  the  rankings  and  development  plans  put 
the  focus  on  career  advancement— a  welcome  change  for  most,  Dunn  says. 

The  Lessons  Learned  » 

•  Communicate  early  and  often.  Communication  from  the  top  lagged  a  bit,  as 
Dunn  and  her  team  tried  to  perfect  their  message.  "You  can’t  convey  a  message 
too  many  times  when  it’s  affecting  people’s  lives,”  Dunn  says. 

•  Succession  planning  involves  some  sacrifice.  In  order  to  promote  one 
employee,  Dunn  moved  him  out  of  something  he  was  succeeding  at  to  give  him 
an  opportunity  to  grow.  “That’s  hurting  me  now.  But  when  we  go  through  the 
next  round  of  succession  planning,  we  can  say,  Look,  this  guy  has  made  it  work 
on  a  new  project  and  with  a  whole  new  group  of  people,”  she  says. 
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Get  to  Know 
Your  Friendly 

cxo 

A  CIO  needs  allies  in  high  places. 
Here’s  how  to  cultivate  them. 

ON  THOSE  REALLY  DIFFICULT  DAYS,  it  may  seem  as  though  you 
have  no  friends.  Yet,  those  are  the  very  days  when  the  rela¬ 
tionships  you  have  built  can  provide  the  support  and  encour¬ 
agement  you  need.  Nurturing  these  relationships  takes  some 
conscious  effort. 

As  both  CIOs  and  CEOs  reported  in  “The  State  of  the  CIO 
2004”  survey,  having  a  healthy  relationship  with  other  CXOs  is 
the  most  effective  practice  for  succeeding  as  a  CIO.  There  are 
many  potential  candidates  to  cultivate,  but  a  few  are  essential. 
The  CEO  is  critical  because  she  is  responsible  for  corporate 
strategy.  The  CFO  has  insight  into  the  financial  implications  of 
both  short-  and  long-term  prospects  of  the  company.  The  pres¬ 
ident  (or  division  president)  understands  the  challenges  of  busi¬ 
ness  operations.  Keeping  your  finger  on  the  pulse  of  the  business 
through  these  relationships  can  provide  an  opportunity  for  you 
to  anticipate  the  needs  of  the  business.  Getting  to  know  these 
other  CXOs  will  help  you  manage  their  expectations  of  your 
organization.  Building  a  friendly  relationship  with  them  and 
enlisting  their  support  as  allies  is  critical,  because  they  will  deter¬ 
mine  your  ultimate  success  or  failure. 


Get  Through  the  CXO’s  Door 

Gaining  access  to  any  of  these  key  individuals  can  be  a  chal¬ 
lenge,  especially  if  you  don’t  report  to  them.  Think  about 
why  they  would  want  to  spend  time  with  you.  It  could  be  to 
mentor  you  or  to  learn  something  from  you.  Finding  the  hook 
will  enable  you  to  be  productive  when  you  do  get  through  the 
door.  At  the  same  time,  keep  foremost  in  your  mind  that  an 
effective  relationship  is  a  two-way  street,  and  your  goal  is  to 
gain  the  insight  you  need  to  continue  delivering  significant 
benefits  to  the  company. 

Once  you  have  figured  out  why  a  particular  relationship  is  g 
important,  take  action  to  gain  access.  Don’t  sit  in  your  office  g 
waiting  for  the  call.  There  are  a  number  of  things  you  can  do  to  | 
improve  your  chances  of  getting  to  know  your  target  executive.  S 

■  Enlist  administrative  assistants.  A  CXO’s  assistant  can  z 

O 

always  find  15  minutes  when  they  can  get  you  into  the  office.  5 

cr 

You  can  enlist  your  own  assistant,  too,  to  utilize  her  network  £ 
to  enhance  your  opportunities.  One  creative  assistant  of  mine  5 
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decided  on  her  own  to  check  my  travel  plans  against  my  com¬ 
pany’s  key  executive’s,  and  arranged  for  me  to  be  on  the  same 
flight  and  in  the  next  seat.  This  provided  me  with  a  great 
opportunity  for  a  relaxed  conversation.  One  of  these  conver¬ 
sations  during  a  big  company  reorganization  resulted  in  me 
getting  a  great  job  in  the  new  structure. 

■  Get  visible.  Make  sure  the  executives  you  need  to  get  close  to 
know  who  you  are  by  raising  your  profile.  This  can  be  done 
inside  and  outside  the  company.  Volunteer  for  task  forces  and 
actively  participate  during  Q&A  sessions  at  corporate  meetings. 
Join  professional  organizations  and  take  a  leadership  role.  Ensure 
any  public  appearances  and  press  interviews  reflea  well  on  the 
company.  I  joined  the  local  chapter  of  the  Society  for  Information 
Management  (SIM),  eventually  took  a  position  at  the  national 


level  and  became  its  first  female  president.  My  involvement  in 
SIM  provided  me  with  great  opportunities  for  some  personal 
press  and  for  different  exposure  for  my  company. 

■  Look  for  informal  opportunities.  These  are  more  available 
than  you  may  think.  Getting  on  the  formal  calendar  is  some¬ 
times  more  difficult  than  engaging  an  executive  at  the  airport,  at 
a  company  social  function,  or  even  in  the  hallway  or  cafeteria.  I 
remember  a  company  funaion  where  I  was  chatting  with  the 
CEO  when  dinner  was  announced;  he  asked  if  I  would  sit  next 
to  him  at  dinner  because  if  he  didn’t  invite  someone,  the  seats  on 
either  side  of  him  would  be  empty! 

In  informal  settings  you  can  get  to  know  each  other  person¬ 
ally.  Don’t  just  talk  about  work.  The  more  your  fellow  CXOs 
see  you  as  a  person,  the  more  credibility  and  influence  you  will 
have — and  the  easier  future  access  will  be.  At  dinner,  the  CEO 
and  I  found  we  both  enjoyed  biking.  “Where  have  you  hiked 
recently?”  became  a  frequent  opening  to  our  future  meetings. 

■  Get  a  reputation  as  a  can-do  CIO.  Seek  out  others  in  your 
company  who  have  the  ear  of  the  key  executives.  Tap  into  their 
knowledge  of  the  company  and  work  your  own  agenda  by  com¬ 
municating  an  innovative  vision  for  IT.  The  more  strategic  and 
innovative  your  vision,  the  more  likely  you  will  have 
sufficient  facetime  with  the  key  executives.  Once  you  win  credi¬ 
bility  at  any  level,  you  have  a  group  of  supporters  who  can  tout 
your  value  to  others. 

When  you  have  the  opportunity  to  interaa  with  any  of  your 
peers,  carefully  choose  the  way  you  communicate.  Try  to  tailor  the 


communication  to  the  audience.  Use  different  approaches,  both 
formal  and  informal.  Show  pictures  or  graphs.  Provide  text  or 
summaries  of  what  you’re  talking  about.  Broadcast  videos  or 
slides.  Or  just  have  a  conversation.  Many  times  a  combination  of 
these  are  effeaive. 

■  Above  all:  Be  brief!  I  had  a  mentor  who  told  me  always  to 
communicate  to  CXOs  in  one  half  hour.  Keeping  it  short  ensures 
better  assimilation  of  the  message  and,  just  as  important,  ensures 
you  will  be  invited  back. 

Use  Access  to  Manage  Expectations 

The  late  Sen.  Sam  Ervin,  head  of  the  Senate  Watergate  com¬ 
mittee,  said  during  that  investigation:  “My  hopes  are  high  but 
my  expectations  are  low.”  This  quote  resonates  with  me  because 
it  acknowledges  that  hopes  and  expeaations 
are  different. 

The  CXO’s  hopes  are  based  on  desired 
outcomes  that  are  usually  unsupported  by  real¬ 
ity.  Expectations  must  be  based  on  facts  and 
commitments.  Managing  hopes  isn’t  possible, 
but  managing  expectations — though  challeng¬ 
ing — is.  The  expectations  must  be  clearly  com¬ 
municated  and  the  commitment  from  all 
parties  must  be  solid.  Even  then,  we  can  still  get  into  trouble 
when  the  business  environment  changes.  The  business  can  begin 
to  drift  beyond  the  boundaries  of  expectations  and  into  hopes 
based  on  assumptions  about  the  new  environment.  For  exam¬ 
ple,  the  necessary  resources  for  a  projea  may  not  be  available, 
but  we  fail  to  communicate  how  that  changes  expectations. 
Working  side-by-side  with  other  CXOs,  you  will  be  able  to  see 
when  expectations  begin  to  drift  toward  hopes.  Alerted  early, 
you  will  be  able  to  realign  expeaations  and  commitments. 

Just  when  you  have  everything  perfectly  aligned,  the  organ¬ 
ization  will  change.  Count  on  it!  On  the  bright  side,  you  have 
another  opportunity  to  build  your  network  of  friends.  However, 
be  prepared  to  have  expectations  reset  by  the  new  executive. 
Just  because  the  job  is  the  same  does  not  mean  the  new  exec¬ 
utive  will  have  the  same  goals,  objectives  or  even  hopes — 
let  alone  expectations! 

Building  those  friendly  relationships  with  the  CXOs — making 
them  allies  and  supporters — will  go  a  long  way  to  helping  you 
manage  the  changing  environment  of  today’s  corporation  and 
ensure  that  you  have  even  fewer  of  those  difficult,  seemingly 
friendless,  days.  0E3 


Send  your  thoughts  about  this  column  to 
leadership@cio.com.  Before  retiring  in  1999, 
Patricia  Wallington  was  corporate  vice  president 
and  CIO  at  Xerox.  She  is  now  president  of  CIO 
Associates  in  Sarasota,  Fla. 


Don’t  just  talk  about  work.  The  more  your 
fellow  CXOs  see  you  as  a  person,  the  more 
credibility  you  will  have. 
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WHY  IBM? 

The  IBM  eServer™  xSeries®  family  with  Intel  Xeon 
Processor-based  Xtended  Design  Architecture  is 
the  next-generation  architecture  designed,  priced 
and  supported  for  businesses  of  every  size. 

Giving  you  unbelievably  high  performance  at  an 
unbelievably  low  price. 

The  entry-level  x226  is  the  most  affordable  xSeries 
system  in  the  2-way  space.  The  x236  offers 
maximum  internal  scalability  in  an  IBM  industry- 
standard  tower.  Our  x336  gives  you  new  levels  of 
performance  density  in  a  2-way  rack-mounted  system. 
And  the  x346  offers  exceptional  scalability  and 
flexible  growth  in  a  2U  system. 

Of  course,  all  of  these  systems  are  powered  by 
state-of-the-art  64-bit  Intel®  Xeon™  Processors. 

Now  let’s  talk  about  storage  attachments  for  your 
eServer  xSeries  systems.  Let’s  talk  IBM  TotalStorage® 
systems.  The  entry-level  DS300  is  for  businesses  of 
any  size.  Rack-ready,  it’s  designed  to  let  you  pay  as 
you  grow.  The  very  hard  to  outgrow  DS400  is  xSeries 
storage  to  the  max.  Fast.  Expandable.  And  it  scales 
up  to  5.8  terabytes.2  Both  share  reliability  and  data 
protection  features  found  in  IBM  eServer  solutions. 

Now,  what  if  you’re  a  mid-sized  business  with  little  or 
no  IT  staff?  Enter  the  IBM  Express  Portfolio.  All  of  the 
above  xSeries  and  storage  products  offer  Express 
models,  specifically  designed  and  optimized  for  mid¬ 
sized  businesses.  IBM  Express  offerings  are  easy  to 
configure.  Easy  to  install.  Easy  to  manage.  And  easy 
on  the  checkbook. 

IBM  EXPRESS  PORTFOLIO  -  BUILT  FOR  MID-SIZED  BUSINESSES. 

|J3  DEMAND  BUSINESS 


WHY  64-BIT? 

IBM’s  innovations  are  ideal  complements  for  64-bit 
Intel  Xeon  Processors:  light  path  diagnostics; 
Calibrated  Vectored  Cooling;  remote  monitoring; 

8  DIMM  slots.  We’ve  got  it  all. 

IBM  eServer  xSeries  systems  are  cost-effective  by 
almost  every  measure  of  TCO.  And  almost  every 
measure  of  ROI.  They  fit  in  standard  racks  and  are 
easily  scalable. 

Our  new  Xtended  Design  Architecture  works  with 
your  32-bit  industry-standard  apps.  And  your  new 
64-bit  industry-standard  apps.  And  those  32-bit 
and  64-bit  apps  that  are  still  on  the  drawing  board. 

WHY  NOW? 

This  is  the  future.  This  is  where  developers  are  going. 
Where  the  industry  standard  is  forming.  Where 
business  is  headed. 

The  transition  is  well  under  way.  Above  ail,  64-bit 
is  stable.  It’s  reliable.  It’s  powerful.  It’s  fast.  It’s  here. 
And  we’re  paving  the  way. 

Every  64-bit-enabled  xSeries  server  is  designed  to 
have  more  memory,  which  allows  you  to  run  more 
powerful  apps.  And  if  you’re  reticent  about  making 
the  move  to  64-bit,  relax.  Xtended  Design  Architecture 
actually  enhances  your  32-bit  apps,  so  you  can  do 
more  with  what  you  already  have.  Do  more  now.  Do 
more  later.  Do  more  period,  with  64-bit  Intel  Xeon 
Processors  and  IBM  Xtended  Design  Architecture. 

These  servers  and  storage  units  are  designed  with 
one  thing  in  mind -you.  It’s  an  exciting  story.  You 
need  to  learn  more  at  ibm.com/eserver/64reasons 


'IBM  web  price  for  the  xSeries  226  (2.8  Ghz  processor,  512  MB  memory,  80  GB  SATA  HDD),  current  as  of  10/18/04,  and  is  subject  to  change  without  notice.  Starting  price  may 
not  include  a  hard  drive,  operating  system  or  other  features.  Price  does  not  include  tax  or  shipping.  Reseller  prices  may  vary.  See  www.pc.ibm.com/us/eserver/xseries.  IBM  does 
not  warrant  non-IBM  products.  Terabyte  equals  one  trillion  bytes  when  referring  to  total  disk  drive  capacity.  Accessible  capacity  may  be  less.  IBM.  the  e-business  logo,  eServer, 
the  eServer  logo,  Calibrated  Vectored  Cooling,  ChipKill,  IBM  Express  Portfolio,  Predictive  Failure  Analysis,  TotalStorage,  xSeries  and  Xtended  Design  Architecture  are  trademarks 
or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside,  the  Intel  Inside  logo  and  Intel  Xeon  are 
trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Linux  is  a  trademark  of  Linus  Torvalds  in  the  United  States, 
other  countries,  or  both.  Microsoft  and  Windows  NT  are  trademarks  of  Microsoft  Corporation  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service 
names  may  be  trademarks  or  service  marks  of  others.  ©2004  IBM  Corporation.  All  rights  reserved. 


ILLUSTRATION  BY  ALEX  NABAUM 


Michael  Schrage  I  Making  IT  Work 


It  s  All  About  the  Execution 


Connect 
Demand  with 


The  CIO’s  next  big  challenge  will  be  figuring 
out  how  to  bridge  the  company’s  sometimes 
conflicting  CRM  and  SCM  objectives 

FOR  ALMOST  TWO  HOURS,  the  project  leader  supervising  IT’s  supply 
chain  initiative  for  a  consumer  packaged  goods  company  pre¬ 
sented  superbly.  The  architecture  made  sense;  her  vendors  were 
aligned;  supplier  IT  shops  appeared  on  board,  and  the  busi¬ 
ness  case  was  consistent  with  IT’s  investment.  Coding  and  roll¬ 
out  were  on  plan.  Tough  questions  had  been  anticipated  with 
well-researched  answers.  The  CIO  was  impressed.  So  was  I. 

The  company’s  CRM  project  leader  then  gave  his  status  report. 
He  also  was  excellent.  His  group  had  done  a  good  job  bench¬ 
marking  both  CRM  aspirations  and  implementations  at  other 
companies.  Their  findings  suggested  clever,  cost-effective  ways  to 
segment  and  service  the  company’s  customers.  He  predicted  this 
would  delay  CRM  deployment  by  90  days.  But  so  what:  The 
business  case  was  compelling.  Creatively  tweaking  the  off-the- 
shelf  software  and  customer  support  training  offered  real  busi¬ 
ness  impact.  The  CIO  was  impressed.  So  was  I.  Good  people, 
good  ideas,  good  expectations  management.  We  got  a  lot  done. 

Only  after  dinner  did  it  hit  me:  There  was  literally  no  con¬ 
nection  between  the  two  presentations.  Zero.  The  supply  chain 
management  (SCM)  and  the  CRM  presentations  lived  in 


parallel  universes  of  business  value.  Customers  played  no  part 
in  the  design  and  deployment  of  the  supply  chain  discussions; 
the  supply  chain  was  utterly  irrelevant  to  the  proposed  CRM 
implementation.  This  fact  went  unnoticed  and/or  unremarked 
on  over  the  course  of  a  full-day  meeting.  Odd. 

By  happenstance,  I  talked  the  next  day  with  a  CIO  who  was 
overseeing  a  difficult  CRM  rollout  along  with  his  company’s 
marketing  department.  So  I  casually  asked  how  he  planned  to 
link  the  new  system  to  the  supply  chain.  “We’re  not,”  he  said. 

A  supply  chain  vice  president  at  a  Fortune  1000  company 
had  a  similar  response:  zero  plans  to  connect  marketing’s  CRM 
system  to  his  finely  tuned  SCM  network.  He  seemed  surprised 
by  the  question.  “You  have  to  manage  suppliers  differently 
than  how  you  manage  customers,”  he  said. 

That’s  inarguable.  Yet,  the  ERP  companies  (notably  SAP)  have 
ostensibly  built  their  futures  around  the  argument  that  ERP  is  the 
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happy  marriage  of  CRM+SCM+financials.  Billions  are  being  bet 
on  this  proposition,  but  I  don’t  believe  it.  After  all,  the  sensibility 
that  requires  a  company  to  reengineer  all  of  its  processes  around 
software  is  not  the  same  sensibility  that  allows  customers  to  freely 
collaborate  with  customer  service.  (I  don’t  mean  to  pick  on  SAP; 
Siebel  also  has  had  a  tough  time  translating  its  “sales-force 
automation”  value  proposition  into  fluent  CRM). 

Then  again,  there’s  Dell.  One  of  the  top  two  personal  com¬ 
puter  companies,  Dell  has  a  “build-to-order”  business  model 
that  clearly  integrates  both  supply  and  demand  chains.  That 
model  has  worked  astonishingly  well  for  Dell,  its  customers 
and  its  key  suppliers.  In  fact,  Dell  could  not  do  what  it  does  if 
it  designed  and  managed  its  supply  chains  and  CRM  as  sepa¬ 


The  notion  that  firms  can  optimize  CRM  without 
undermining  SCM  efficiencies— and  vice  versa— is 
a  chimera.  There  are  always  trade-offs. 


rate  technical  entities.  The  “build-to-order”  business  value 
proposition  demands  an  architecture  that  inherently  integrates 
customers  and  suppliers.  Yes,  Dell  has  a  “supply  chain,”  but  it 
coevolves  in  the  context  of  explicit  customer  demand. 

I’m  not  suggesting  that  the  Dell  implementation  is  the  way 
for  companies  to  go.  We  have  to  contrast  the  successful  Dell 
model  with  the  also  successful  Wal-Mart  model.  There’s  not  a 
company  on  this  planet  that — day  in  and  day  out — does  a  bet¬ 
ter  job  of  profitably  managing  more  SKUs  than  the  world’s 
largest  retailer.  Wal-Mart  understands  and  lives  SCM  in  ways 
that  are  still  not  fully  appreciated  by  either  its  analysts  or  com¬ 
petitors.  Spend  a  few  hours  at  a  Wal-Mart  distribution  center, 
and  you’ll  be  in  awe. 

That  said,  it’s  equally  clear  that  the  supply  chain  sensibility 
that  enables  “everyday  low  pricing”  appears  to  leave  little  room 
for  creativity,  innovation  and  impact  in  CRM.  Wal-Mart’s  cre¬ 
ativity,  innovation  and  impact  live  in  its  everyday  low  pricing. 
Price,  not  build-to-order,  is  Wal-Mart’s  organizing  principle  for 
IT  architecture  and  investment. 

Only  the  idiotic  or  the  arrogant  would  attempt  to  out-Dell 
Michael  or  out-Sam  Wal-Mart.  But  the  scalable  IT-enabled 
success  of  these  two  giants  strongly  suggests  that  CIOs  should 
rethink  where  value  is  created  in  enterprise  architectures  and, 
just  as  importantly,  where  enterprise  architectures  can  create 
value.  There’s  no  question  that  you  can  optimize  the  efficiency 
of  a  supply  chain  at  the  cost  of  being  less  responsive  to  cus¬ 
tomers.  For  example,  I  might  save  my  firm  25  percent  of  hard 
dollar  costs  if  I  eliminate  some  distribution  centers  and  carry 
less  inventory.  That  decision  would  probably  make  my  com¬ 
pany  less  responsive  to  customers,  since  they  might 


then  experience  more  stock-outs.  But  that  trade-off  may  be 
worth  it.  What  I  pay  for  that  extra  inventory  may  cost  more 
than  what  I  lose  in  sales  from  customers  who  don’t  find 
the  stock  they  want.  The  question  is:  What’s  the  better 
business  investment? 

Conversely,  I  might  be  able  to  command  a  20  percent  pre¬ 
mium  from  my  most  profitable  customers,  but  only  if  my  top 
five  suppliers  agree  to  meet  my  just-in-time  demands  for  cus¬ 
tomized  products.  Yet  my  suppliers  might  be  reluctant  to  do 
that  because  it  may  put  their  other  vendor  relationships  at  risk. 

In  other  words,  the  notion  that  organizations  can  optimize 
CRM  without  undermining  SCM  efficiencies — and  vice  versa — 
is  a  chimera.  There  are  always  trade-offs.  The  business  issue  is: 

Are  these  good  trade-offs  or  bad  trade¬ 
offs?  The  technical  issue  is:  Do  your  archi¬ 
tectures  and  implementations  allow  your 
company  to  quickly  and  cost-effectively 
act  on  these  business  trade-offs  once  the 
decision  has  been  made?  Let’s  reframe  the 
question:  Does  the  company  get  a  better 
return  from  investing  in  its  SCM?  Its  CRM?  Or  from  investing 
in  the  technical  and  business  intersection  of  SCM  and  CRM? 

I  think  one  of  the  most  important  roles  the  CIO  will  play 
tomorrow  is  facilitating  C-level  conversations  around  deter¬ 
mining  whether  the  business  is  better  off  treating  SCM  and 
CRM  as  complements  or  as  rivals.  The  CIO’s  challenge  will 
be  to  assure  that  (no  matter  what  the  decision  is)  the  technical 
architectures  are  robust  enough  to  handle  it. 

If  you’re  Dell,  you’ve  grown  up  understanding  this.  If  you’re 
Wal-Mart,  you’ve  grown  up  deciding  that  asymmetric  invest¬ 
ments  in  supply  chain  define  your  global  competitive  guillo¬ 
tine.  But  if  you’re  Target?  If  you’re  GM  or  Ford  or  Toyota?  If 
you’re  Procter  &  Gamble?  If  you’re  Citigroup  or  Fidelity?  The 
answers  aren’t  so  clear. 

Ultimately,  organizations  are  going  to  have  to  expend  more 
time,  thought  and  ingenuity  determining  what  processes  should 
cut  across  the  boundaries  of  supply  chain  optimization  and 
CRM.  Different  organizations  are  going  to  come  to  completely 
different  conclusions.  In  the  same  way  that  IBM,  Apple  and 
FIP  can’t  be  Dell — and  Target  or  Sears  can’t  be  Wal-Mart,  and 
Delta  Air  Lines  can’t  be  Southwest — deciding  how  and  where 
customer  networks  should  be  linked  to  supplier  networks  will 
be  an  idiosyncratic  process.  Successfully  implementing  those 
idiosyncrasies  will  be  the  CIO’s  dominant  operational  challenge 
and  the  organization’s  ultimate  source  of  value 
differentiation.  HP1 


Michael  Schrage  is  codirector  of  the  MIT  Media 
Lab's  eMarkets  Initiative.  He  can  be  reached  at 
schrage@media.mit.edu. 
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25,000  multi-site  organizations  have  chosen  BT  with  its  decades  of  network  expertise.  We  block  over  40,000 
viruses  and  prevent  more  than  14m  access  attempts  every  month.  So,  BT  helps  ensure  that  your  business-critical 
information  gets  to  the  right  person,  in  the  right  place,  at  the  right  time,  without  interference.  Securing  your 
organization  to  keep  on  doing  what  it  does  best.  Discover  more  about  succeeding  in  the  digital  networked 
economy  at  bt.com/networkedlT 


More  power  to  you 


'As  reported  on  Silicon.com  in  Jan  2004,  from  a  report  from  Trend  Micro. 


The  deadline  is  still  six  weeks  away. 

But  on  most  days,  the  head  of  the  supply  chain  for  one  of  Wal-Mart’s  top  sup¬ 
pliers  wishes  it  was  two  years  away. 

His  company  is  one  of  the  largest  consumer  goods  manufacturers  in  the  world, 
and  by  Jan.  1, 2005,  he  is  supposed  to  have  a  system  in  place  for  attaching  radio 
frequency  identification  (RFID)  tags  to  a  portion  of  products  destined  for  WalJ 
Mart  stores.  But  this  particular  IT  executive  already  knows  he  isn’t  going  to 
make  that  deadline. 

Sure,  he’ll  stick  RFID  tags  onto  just  enough  pallets  to  satisfy  the  folks  in  Wal- 
Mart’s  Bentonville,  Ark.,  headquarters,  but  he’s  not  certain  those  tags  will  even 
be  functional  upon  arrival  because  of  technical  problems.  And  that  means  the  effi¬ 
ciencies  that  Wal-Mart  has  been  dreaming  of 
achieving — the  RFID-enabled  transparent 
supply  chain — may  not  happen  anytime  soon. 

“We  don’t  have  a  business  case  for  RFID,  ” 
says  the  supply  chain  executive,  who  insisted 
on  anonymity.  “Because  the  standards  are  not 
complete,  the  equipment  isn’t  developed.  And 
because  the  equipment  isn’t  developed,  I  can’t 
fulfill  Wal-Mart’s  demand.” 

This  executive  is  far  from  alone.  Even 
though  no  suppliers  will  admit  publicly  that 


Reader  ROI 

►  Why  Wal-Mart's  suppliers 
think  RFID  technology  is 
not  ready  for  prime  time 

►  How  some  of  those  suppli¬ 
ers  are  trying  to  circumvent 
the  retailer's  mandate 

►  What  technology  advances 
these  suppliers  want  to  see 
before  they  hop  on  board 
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hy  Wal-Mart’s 
suppliers  won’t 
make  the  Jan.  1 
deadline  for  RFID 
tagging 


BY  THOMAS  WAILGUM 


they  may  not  meet  the  deadline,  privately  some 
say  that  meeting  Wal-Mart’s  expectations  is 
just  not  possible — at  least  by  the  deadline  the 
retail  giant  has  set.  And  the  mission  itself  has 
become  a  moving  target.  Originally,  Wal-Mart 
insisted  that  its  top  suppliers  put  RFID  tags  on 
all  of  the  products  shipped  to  specific  distri¬ 
bution  centers  in  Texas.  Now,  Wal-Mart  is  say¬ 
ing  it  expects  its  suppliers  to  attach  tags  to  only 
65  percent  of  their  products  (on  average). 
However,  several  suppliers  have  told  CIO  that 
the  percentage  of  their  products  tagged  would 
be  much  less  than  65  percent — somewhere  on 
the  order  of  1 0  percent  to  1 5  percent. 

“Many  of  these  consumer  packaged 
goods  companies  are  really  struggling  with 
the  business  case,”  says  Christine  Overby,  an 
RFID  analyst  at  Forrester  Research.  “These 
are  very  costly  projects,  and  they’re  hard  to 
do  with  a  technology  that’s  a  moving  target.  ” 

Patrick  Sweeney,  CEO  of  ODIN  Tech- 
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nologies,  an  RFID  infrastructure  software 
and  integration  company  that  works  with 
several  of  the  top  100  suppliers,  says  Wal- 
Mart’s  suppliers  are  split  into  two  camps: 
About  30  percent  of  them  are  going  the  whole 
nine  yards  and  integrating  RFID  into  their 
infrastructures  now.  The  rest  are  emulating 
the  supply  chain  head  quoted  above  and  prac¬ 
ticing  a  method  known  as  slap  and  ship. 

Essentially,  what  these  suppliers  will  be 
doing  on  Jan.  1  is  sticking  an  RFID  tag  on  only 
a  certain  percentage  of  cases  and  pallets  in  ware- 


What  Wal-Mart 

WANTS 

IN  1999,  MIT  founded  the  Auto-ID  Center 
to  look  more  closely  at  how  RFID  technol¬ 
ogy  could  help  businesses  track  and  manage 
products  using  embedded  sensors.  The  cen¬ 
ter  proposed  an  electronic  product  code,  or 
EPC,  as  the  latest  method  for  identifying 
products.  The  EPC  would  utilize  radio  fre¬ 
quencies  to  identify  computer  chips  placed 
in  tags.  This  technology  would  eventually 


Why  Wal-Mart’s 
SUPPLIERS  Can’t  Say  No 


houses  that  are  closest  to  Wal-Mart’s  Texas  dis- 
tribution  centers.  Slap  and  ship  involves 
minimal  data  integration  and  leaves  the  retail 
supply  chain  still  blind  to  product  movement. 
[And  it  will  apply  to  only  a  small  percentage  of 
the  products  shipped  to  Texas. 

Not  surprisingly,  slap  and  ship  is  not  a 
method  endorsed  by  Wal-Mart.  “It’s  some¬ 
thing  we  sort  of  cringe  at,”  says  Simon  Lang- 
ford,  Wal-Mart’s  manager  of  RFID  strategy. 

Langford  won’t  say  as  much,  but  come  Jan. 

1 ,  Wal-Mart  could  use  some  positive  publicity 
about  its  RFID  program.  The  reputation  of  the 
world’s  biggest  retailer  has  been  tarnished  of 
late  with  allegations  of  unfair  wage  practices, 
hiring  illegal  immigrants  and  discriminating 
against  female  employees.  And  now  some 
industry  experts  are  predicting  that  suppliers’ 
failure  to  meet  the  RFID  mandate  could  be 
more  bad  press  for  the  retail  chain.  Wal-Mart’s 
biggest  mistake,  they  say,  was  imposing  a  top- 
down  mandate  on  its  suppliers  before  the  tech- 
Inology  and  business  needs  matured  to  where 
RFID-tagged  inventory  made  good  economic 
sense  for  suppliers,  customers  and  Wal-Mart. 

“These  suppliers  are  being  forced  to  imple¬ 
ment  the  technology  in  a  way  that  may  not 
suit  their  business,”  says  Kara  Romanow,  an 
RFID  analyst  at  AMR  Research.  “The  cost 
model  just  doesn’t  workrightnow.” _ 
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No.l  largest  private-industry 
employer  in  the  United  States  with 

1.3  million  employees 

2.3%  of  the  United  States’  2003 
gross  national  product  with 

$256.3  billion  in  total  revenue 

138  million  shoppers 

per  week  in  5,139  stores  produce 

$8,126  in  sales  per  second 

Wal-Mart  sells  in  3  months 
what  The  Home  Depot— the  next 
largest  retailer— sells  in  lyear 


replace  bar  codes,  which  require  the  scanner 
to  “see”  the  UPC  number  to  read  it,  with  a 
device  that  requires  no  line  of  sight  and  little 
human  intervention. 

When  applied  in  a  controlled  environment, 
RFID  tags  and  the  devices  that  “read”  them 
work  amazingly  well.  Essentially,  the  system  is 
made  up  of  two  components.  First,  there’s  the 
tag,  which  varies  in  size  and  shape.  Some  look 
like  stickers  and  labels,  and  others  like  thin 
plastic  wristbands.  Tags  are  affixed  to  cases  and 
pallets.  Each  tag  has  an  antenna  and  is  embed- 
dedwitha  chip  that  contains  a  unique  string  of 
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numbers  that  identifies  each  product.  Tags  can 

be  passive  or  active.  Active  tags  have  a  battery; 
passive  tags,  which  get  their  energy  from  the 
antennal  devices  (known  as  readers),  are  less 
expensive  and  more  common. 

Readers  identify  the  tags  as  they  pass  by. 
The  magnetic  field  from  the  antenna  wakes 
up  the  passive  tags  as  the  reader  approaches, 
and  the  tags  transmit  their  digital  information, 
in  the  form  of  the  electronic  product  code, 
from  the  reader  into  a  computer  system. 

This  essentially  is  the  system  that  Wal-Mart 
and  others,  including  the  Department  of 
Defense  and  Target  Stores,  believe  will  revolu¬ 
tionize  the  global  supply  chain.  And  indeed 
most  supply  chain  experts  predict  that  RFIDs 
will  eventually  take  the  black  holes  out  of  the 
retail  supply  chain,  providing  product  shipment 
and  inventory  views  of  unprecedented  detail. 

“Today’s  supply  chain  allows  products  to 
be  misplaced,  misdirected  and  lost,”  says  Paul 
Fox,  director  of  external  relations  for  Gillette, 
which,  along  with  Procter  &  Gamble,  was 
one  of  the  early  backers  of  RFIDs  as  a  member 
of  the  MIT  Auto-ID  Center.  “There  are  count¬ 
less  millions  of  dollars  tied  up  in  warehousing 
because  of  the  inefficiencies  in  the  supply 
chain.”  Fox  believes  RFID  technology  will  tell 
Gillette  “where  the  product  is  in  our  ware¬ 
houses,  what  the  product  is  and  how  much  of 
it  we  have.  No  manual  counting,  no  driving 
around,  no  question  of  mispicks,  no  order 
number  mistakes.  Once  you  get  an  accurate 
understanding  of  inventory  position,  that 
information  becomes  invaluable.” 

For  Wal-Mart,  the  business  case  for  RFID 
is  about  maintaining  low  prices  for  its  cus¬ 
tomers.  “[RFID]  will  help  us  increase  cus¬ 
tomer  satisfaction  in  the  near  term,  and 
ultimately  play  an  important  role  in  helping 
us  control  costs  and  continue  offering  low 
prices,”  Wal-Mart  Executive  Vice  President 
and  CIO  Linda  Dillman  said  in  a  statement 
released  on  April  30, 2004,  the  day  that  Wal- 
Mart  began  its  RFID  pilot.  The  eight  suppli¬ 
ers  that  started  shipping  a  handful  of 
RFID-enabled  pallets  were  Gillette,  Hewlett- 
Packard,  Johnson  &  Johnson,  Kimberly- 
Clark,  Kraft  Foods,  Nestle  Purina  PetCare, 
Procter  &  Gamble  and  Unilever. 


“You  Have  to  applaud  Wal-Mart  for  getting  So  when  Wal-Mart  invited  the  top  1 00 


this  started,”  says  Simon  Ellis,  supply  chain 
futurist  for  Unilever,  which  makes  health  and 
beauty  products.  “If  someone  hadn’t  stepped 
forward,  we  would  all  still  be  waiting  around.” 

Langford  says  the  RFID  payback  for  Wal- 
Mart’s  suppliers  will  be  twofold:  It  will  allow 
them  to  reduce  their  inventory,  and  because 
Wal-Mart  will  always  have  their  product  in 
stock,  sales  will  improve.  “We  can  handle 
their  product  much  more  efficiently  in  terms; 
of  getting  it  out  to  the  shelf,”  he  says.  “It 
makes  a  huge  difference.” 

When  Wal-Mart 

WANTS  IT 

WAL-M  ART’S  ANNOUNCEMENT  in  June  2003 
of  the  January  2005  deadline  caught  many  in 
the  supplier  community  off  guard.  Some 
didn’t  even  know  what  RFID  stood  for;  oth¬ 
ers  dismissed  the  announcement  as  grand- 
standing. 


suppliers  to  Bentonville  in  November  2003 
for  more  specifics  about  its  RFID  master  plan, 
there  was  speculation  among  suppliers  and 
business  journalists  that  Wal-Mart  would 
back  off  the  deadline. 

That  didn’t  happen. 

During  the  presentation,  Wal-Mart  exec¬ 
utives  defined  what  the  EPC  would  be,  what 
class  of  chips  they  would  accept  and  which 
three  distribution  centers  would  start  accept¬ 
ing  RFID  deliveries.  The  suppliers,  according 
to  one  participant,  listened  in  stunned  silence. 
As  he  recalled,  it  was  like  attending  a  session 
on  nuclear  physics. 

Yet  there  were  few  questions,  and  “they 
were  just  for  clarification,”  says  the  supply 
chain  executive,  who  attended  the  session. 
“There  was  no  pushback.” 

Wal-Mart  then  reaffirmed  its  deadline  and 
announced  it  would  not  give  any  price  breaksj 
to  suppliers  who  complied.  “And  no  one 
raised  their  hand  and  said,  Excuse  me?” 


recalls  the  suppIycHain  executive. 

It  is  now  a  year  later,  and  his  ears  are  still  ring¬ 
ing.  He’s  frustrated  by  the  immature  technol¬ 
ogy,  the  nonexistent  standards,  the  approaching 
deadline.  “There’s  just  no  benefit  right  now,” 
he  says.  “So  I’m  being  supportive  of  something 
I  don’t  really  want  to  do.  ” 

How  Is  aTV  Different 

FROM  A  RAZOR? 

FROM  THE  BEGINNING,  the  price  of  the  EPC 
tag  has  been  the  ultimate  deal-killer  for  RFID  in 
the  retail  world.  Before  the  turn  of  the  millen¬ 
nium,  tags  cost  anywhere  from  $1  to  $2  each. 
Then  they  broke  the  $  1  barrier — running  sup¬ 
pliers  anywhere  from  25  to  75  cents,  depend¬ 
ing,  of  course,  on  the  volume  of  the  purchase. 

But  suppliers  say  the  price  must  roll  back 
even  further.  RFIDs  are  still  too  expensive  to 
make  much  economic  sense,  says  AMR’s 
Romanow  and  others. 

At  this  point,  RFID-enabled  cases  can  cost 


In  Search  of  a  STANDARD 

Wal-Mart  suppliers  are  still  waiting  for  the  next  generation  of  standardized  tags 


MIKE  O’SHEA,  Kimberly-Clark’s  direc¬ 
tor  of  RFID  strategies,  and  others  with 
worldwide  supply  chain  operations  are 
desperate  for  a  global  RFID  standard. 

Due  to  various  radio  frequency  spec¬ 
trum  issues  and  bandwidth  constraints, 
the  wait  is  still  on  for  a  commercially  avail¬ 
able  RFID  tag  that  will  work  across  conti¬ 
nents.  "We’re  all  looking  forward  to  a 
global  tag,”  O’Shea  says.  "There’s  one 
for  the  United  States,  but  it’s  different  in 
Europe,  and  it's  different  in  Asia  too.” 

The  next  generation  of  tags,  called  Gen 
2,  is  supposedly  going  to  unite  worldwide 
RFID  operations.  Right  now,  Wal-Mart 
has  said  it  will  accept  EPC  Version  1, 
Class  0  and  Class  1  tags  from  its  suppli¬ 
ers  on  the  Jan.  1,  2005,  deadline  for  the 


first  phase  of  RFID  implementation. 

EPCglobal  is  the  organization 
entrusted  with  making  sure  that  elec¬ 
tronic  product  code  (EPC)  eventually 
becomes  the  global  RFID  standard.  It  is 
a  joint  venture  of  the  Uniform  Code  Coun¬ 
cil  and  EAN  International,  which  are  the 
standards  administrators  for  bar  codes. 
EPCglobal  has  more  than  200  member 
companies,  including  most  of  Wal-Mart’s 
top  100  suppliers.  There  are  also  indus¬ 
try-specific  action  groups,  made  up  of 
representatives  from  those  200  or  so 
members,  that  work  on  making  sure  the 
technical  specifications  jibe  with  the 
retail  industry’s  real-world  needs. 

Gen  2,  which  everyone  is  buzzing 
about,  isn’t  scheduled  to  be  ratified  by 


the  EPC  board  of  governors  until  the 
fourth  quarter  of  2004.  "It’s  incredibly 
difficult  to  predict,”  says  Kevin  Ashton, 
who  was  cofounder  of  MIT's  Auto-ID 
Center  and  is  now  vice  president  of  mar¬ 
keting  for  ThingMagic,  a  maker  of  RFID 
readers.  “It's  a  gruesome  political 
game,”  largely  because  each  vendor 
has  its  own  standard  and  wants  that 
standard  to  be  the  global  rule  of  thumb, 
he  says. 

If  and  when  one  standard  is  adopted, 
it’s  anyone’s  guess  when  commercial 
products  will  be  available,  says  Ashton. 
“Some  say  commercially  available  in  the 
first  quarter  of  2005.  Others  claim  in  the 
first  quarter  of  2006.  We’ll  all  just  have 
to  wait  and  see,”  he  adds.  -T.W. 
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a  supplier  approximately  50  cents  more  per 
Case.  (According  to  some  suppliers,  about 
20  to  30  cents  of  that  is  the  cost  of  the  tag,  and 
another  20  to  30  cents  is  the  labor  costs  to 
affix  the  tags.)  Forrester’s  Overby  estimates, 
using  a  fictional  $  1 2  billion  supplier  that  ships 


SIMON  LANGFORD,  Wal-Mart’s  manager  of  RFID 
strategy,  concedes  that  not  every  supplier  will  make  the 
Jan.  1  deadline.  “We’ve  already  worked  with  a  couple 
of  suppliers  in  the  top  100  that  won’t  be  live  in  January, 
to  create  an  alternative  for  them,”  he  says. 


ments  of  RFID.  Not  all  tags  and  readers  can 
communicate  with  each  other.  So  Wal-Mart, 
for  example,  might  need  to  have  two  (or  more) 
types  of  readers  in  its  warehouses  to  read  dif¬ 
ferent  tags  from  hardware  vendors  such  as 
Matrics  or  Alien  Technologies,  to  name  just 


is  that  it  tends  to  act  abnormally  when  it’s  near 
certain  elements — liquids,  metals,  porous 
objects.  For  Mike  O’Shea,  director  of  RFID 
strategies  at  Kimberly-Clark,  this  has  been  a 
problem  with  the  company’s  baby  wipes. 
“The  baby  wipes  absorb  RF  signals,”  he  says. 


15.6  million  cases  and  pallets  to  Wal-Mart 
per  year,  the  supplier  would  spend  an  extra 
$7.6  million  in  tag  costs.  (Her  example 
assumes  a  40  cent  tag  price.) 

Beyond  the  price  of  the  technology,  another 
problem  is  Wal-Mart’s  one-size-fits-all  plan, 
say  many  suppliers  and  industry  analysts.  In 
Wal-Mart’s  world,  there’s  no  difference 
between  a  Gillette  Venus  razor,  an  HP  printer 
and  a  12-pack  of  Coke.  All  of  the  cases  on  each 
pallet  have  to  have  an  RFID  tag  when  shipped. 
Unfortunately,  like  the  different  sizes  of  cloth¬ 
ing  on  Wal-Mart’s  sales  racks,  there  are  as 
many  small  and  medium  suppliers  with  low- 
bost  items  as  there  are  large  and  XLs  with 
-value  merchandise.  Romanow  calls  it  the 
“toilet  paper  and  toothpaste”  problem.  “If 
you  look  at  TVs,  DVDs  and  video  games,  the 
price  of  the  tags  doesn’t  matter,”  she  says. 
“  But  when  you’re  talking  about  TP  and  tooth¬ 
paste,  there  is  no  tag  cost  at  the  case  and  pallet 
level  that  makes  the  numbers  work.” 

What’s  the 

FREQUENCY? 

THERE’S  ANOTHER  PROBLEM  with  RFIDs: 
No  one  standard  for  the  technology  currently 
exists  (see  “In  Search  of  a  Standard”  on  Page 
53).  And  nowhere  is  the  lack  of  a  global  stan¬ 
dard  more  vexing  than  with  the  most  basic  ele- 


two.  Kevin  Ashton,  cofounder  of  the  MIT 
Auto-ID  Center  and  vice  president  of  market¬ 
ing  for  reader-maker  ThingMagic,  explains  it 
by  looking  at  televisions. 

“Whether  you  buy  a  Sony  or  Panasonic  or 
whatever,  you  know  that  TV  will  work 
because  of  the  National  Television  System 
Committee  broadcast  standard,”  he  says.  But 
that’s  not  the  case  with  RFID  equipment;  the 
standard  just  doesn’t  exist,  and  therefore, 
there’s  no  universal  interoperability  among 
hardware  equipment. 

The  radio  waves  that  underlie  the  technol¬ 
ogy  have  also  caused  problems  in  several 
pilots.  ODIN  Technologies’  Sweeney,  who’s 
the  author  of  the  upcoming  RFID  for  Dum¬ 
mies ,  recalls  one  “bake  off”  between  com¬ 
peting  RFID  technology  providers  (whoever 
got  the  best  read-rates  would  get  the  supplier’s 
business).  One  provider  wasn’t  getting  a  good 
rate  so  their  engineer  kept  cranking  up  the 
power,  and  adding  more  antennas  and  an 
additional  reader  to  the  loading  dock  door. 
The  read-rates  never  got  above  50  percent. 

“People’s  inclination  is  to  add  more  anten¬ 
nas  and  more  power.  In  most  cases,  you  just 
make  it  worse,  ”  he  says.  “  It’s  no  wonder  they 
couldn’t  get  it  to  work,  with  one  reader 
drowning  out  the  other  reader.  ”  And  this  was 
a  company  with  experience  in  the  RFID  space. 
_  Oneimportant  property  of  radio  frequency 


“Our  packaging  engineers  have  worked  on 
antenna  designs,  looking  at  where  you  place 
the  tags  and  chips  on  products  to  get  the  best 
read-rates.” 

Unilever’s  Ellis  has  had  similar  problems. 
“The  liquids  and  moisture  issue  is  more  diffi¬ 
cult  because  the  liquid  is  inherent  in  our  prod¬ 
uct,”  he  explains. 

Ian  Robertson,  director  of  the  RFID  pro¬ 
gram  office  at  Hewlett-Packard,  and  his  team 
have  done  a  lot  of  experimenting  with  tags  to 
determine  how  to  best  tag  (among  other 
items)  HP’s  ink-jet  cartridges,  which  contaiu 
ink  and  metal,  and  are  wrapped  in  metalized 
paper.  Robertson’s  work  on  the  ink-jet  pack¬ 
aging  has  been  a  showcase  of  success  for  the 
Wal-Mart  pilot,  but  that’s  probably  due  to  the 
fact  that  HP  is  also  a  solutions  provider  to 
other  suppliers  struggling  with  RFID  and  has 
been  working  on  the  area  since  2002. 

Suppliers 

IN  PAIN 

FOR  THE  ANONYMOUS  EXECUTIVE  in  charge 
of  supply  chain  operations,  it’s  been  a  night¬ 
mare  trying  to  get  to  compliance.  For  one, 
the  “squiggle”  RFID  tags,  which  are  the 
mostly  widely  available  and  cheapest,  are 
failing  because  some  of  his  products  skew  the 
radio  frequency  signal.  So  he’s  having  to  use 
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Grace  under  pressure  begins  with  knowledge 


As  the  IT  Executive  of  a  midsize  organization,  you  know  pressure. 

Your  team  relies  on  your  every  decision.  So,  of  course,  do  your  board  members.  And 
your  executive  peers  ...  and  the  workforce  ...  and  your  customers  ...  and  suppliers. 


MARK  YOUR  CALENDAR 

_ EAST  COAST 

April  17-20,  2005 
New  Orieans,  Louisiana 

_ WEST  COAST 

September  18-21,  2005 
Salt  Lake  City,  Utah 

_ UK  &  IRELAND 

June  7-9,  2005 
Dublin,  Ireland 

jj—  IT  EXECUTIVES:  To  qualify 
as  a  hosted  guest,  complete 
the  online  application  at 
i  vww.midsizeenterprise.com/cio 

VENDORS:  For  opportunities 
to  present  solutions  to 
this  executive  audience, 
call  877-619-7956,  x493. 


When  every  decision  you  make  impacts  an  organization  this  deeply,  your  leadership  must  be 
rock  solid.  IT  Governance.  Change  Management.  Business  Intelligence.  VoIP.  Data  Privacy 
&  Protection.  Application  Integration.  Security.  All  critical  issues,  and  all  your  call. 

Gain  the  strategic  advice  and  visionary  knowledge  you  need  to  make  confident,  informed  decisions 

at  Gartner  Midsize  Enterprise  Summit: 

•  Insight  from  leading  Gartner  analysts 

•  The  latest  in  trend  analysis  and  research 

•  Peer  networking 

•  Previews  and  case  studies  of  the  latest  technologies 

•  Actionable  advice  from  thought  leaders 

Attend  this  industry-leading  event  produced  by  Gartner,  the  undisputed  world  leader  in 
technology  research  and  opinion  for  business  success.  Get  the  Answers.  Relish  the  Pressure. 


Gartner  [^Midsize  EnterpriseSummit 
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arrival  Because  of  mechanical  problems. 


|a  more  expensive  tag. 

The  next  generation  of  tags,  which  he’s 
[hoping  will  help  solve  some  of  these  prob¬ 
lems,  most  likely  won’t  be  available  until  the 
middle  of  2005.  And  it’s  anyone’s  guess  how 
much  those  new  tags  will  cost. 

As  to  the  status  of  his  ongoing  warehouse 
RFID  pilot,  which  should  be  cranking  right 
now:  “Frankly,  we’ve  not  even  opened  up  the 
warehouse  door  yet,”  he  says. 


The  supply  chain  executive  thinks  the 
[technology  just  isn’t  there.  “I  don’t  think 
RFID  is  a  mature  application  at  this  point 
and  time,”  he  says.  “I  think  it’s  probably  two 
years  premature.” 

The  supply  chain  manager  at  another  top 
dOO  supplier,  who  also  insisted  on  anonymity, 
agrees.  “Our  experiences  in  our  pilot  have 
shown  that  this  is  not  ready  for  prime  time,” 
he  says.  “The  tag  and  reader  performance 
problems  are  a  long  way  from  being  solved.  ” 

Suppliers  must  consider  some  unpleasant 
alternatives.  If  they  hang  back  and  wait  for 
RFID  to  develop,  thereby  lowering  some  of 
the  costs  of  entry  and  the  expense  of  retro¬ 
fitting  their  operations,  they  fear  Wal-Mart 
might  get  mad,  and  they  may  also  lose  ground; 
to  competitors.  So  their  approach  has  been 
to  comply  with  the  mandate  via  slap  and  ship. 
Many  suppliers  are  applying  the  tag  on  pallets 
to  be  shipped  to  warehouses  in  the  region 
where  the  Wal-Mart  distribution  center  is 
located.  Using  the  product  that  is  destined  to 
be  shipped  the  next  day  (which  is  already  pal- 
[letized  and  stretch-wrapped),  they  are  taking 
off  the  stretch-wrap,  depalletizing,  applying 
the  tag,  writing  the  tag,  repalletizing,  rewrap- 
ping  and  sending.  And  even  then,  suppliers 
are  afraid  the  tags  might  not  function  on 


What  this  kind  of  wasteful  effort  reflects, 
the  supply  chain  executive  concludes,  is  a 
“premature,  underdeveloped  industry  trying 
to  support  a  major  launch.” 

The  other  supply  chain  manager  inter¬ 
viewed  for  this  article  also  has  concerns  with 
the  tags.  His  company  is  trying  all  kinds  of  tags 
to  work  with  his  products.  He’s  found  that 
many  tags  are  poor  quality,  and  when  they  are 


delivered  (usually  in  rolls),  it’s  not  uncommon 
to  find  that  up  to  30  percent  are  unusable.  “We 
don’t  pay  for  them,  but  in  terms  of  process  effi¬ 
ciency...,”  he  pauses  and  sighs.  He  also  has  con¬ 
cerns  about  the  manual  tagging  of  cases  and 
pallets,  citing  the  high  cost  and  inaccuracy. 

These  suppliers  haven’t  even  begun  to  grap¬ 
ple  with  the  issue  of  how  to  integrate  the  new 
RFID  data  with  the  legacy  data.  “RFID 
demands  the  destruction  of  silo-based  corpo¬ 
rate  procedures  and  processes,”  says  John 
Greaves,  head  of  the  global  RFID  technology 
integration  group  at  Deloitte.  “You  are  divorc¬ 
ing  yourself  from  historical  legacy  systems.  ” 

Wal-Mart’s  Langford  says  he’s  aware  of 
supplier  pain.  “We  obviously  realize  that  for 
some  suppliers,  the  current  cost  of  the  tech¬ 
nology  and  the  tag  will  be  very  difficult  and 
cost-prohibitive  to  tag  1 00  percent,  ”  he  says. 
Wal-Mart,  he  says,  will  work  with  the  sup¬ 
pliers  to  get  them  up  to  speed. 

Langford  concedes  that  not  every  supplier 
will  make  the  January  deadline.  “We’ve 
already  worked  with  a  couple  of  suppliers  in 
the  top  100  that  won’t  be  live  in  January,  [to 
create]  some  alternative  plans  for  them,” 
Langford  says.  “  We  will  work  with  each  sup¬ 
plier  individually  and  look  at  the  reasons  why 
[they.can’t.make  the  deadline].” _ 


IMPOSSIBLE? 

THOUGH  WAL-MART’S  JANUARY  DEADLINE 

has  never  wavered,  many  analysts  and  some 
suppliers  whisper  that  Bentonville’s  expecta¬ 
tions  for  compliance  have  softened.  Wal- 
Mart  itself  acknowledges  that  it  will  settle  for 
less  than  100  percent  compliance  on  prod¬ 
ucts  shipped  to  its  Texas  distribution  centers. 
Langford  says  he  expects  that  on  average, 
65  percent  of  cases  and  pallets  to  Texas  will  be 
tagged  by  Jan.  1.  However,  suppliers  claim 
that  Wal-Mart  is  privately  negotiating  even 
lower  shipment  percentages  with  suppliers 
that  say  they  won’t  be  able  to  meet  the  origi¬ 
nal  mandate.  And  several  suppliers  reported 
that  those  negotiated  percentages  are  far 
below  65  percent. 

But  what  if  many  suppliers  still  can’t  meet 
Wal-Mart’s  lowered  expectations?  Will  their 
failure  turn  into  more  bad  press  for  Wal- 
Mart?  A  lot  of  that  will  depend  on  how  the 
retailer  deals  with  those  suppliers  that  are 
struggling  to  comply.  Will  there  be  monetary 
penalties  for  delinquent  suppliers,  as  many 
industry  observers  have  hinted?  Langford! 
will  not  even  speak  of  such  penalties.  “We  will 
take  each  case  on  merit  and  discuss  it  with 
that  supplier,”  he  says. 

Regardless  of  how  Wal-Mart  plays  it,  it’s 
clear  that  many  suppliers  will  do  just  enough 
to  stay  in  Bentonville’s  good  graces — and  no 
more.  “I  can  imagine  a  supply  chain  that  is 
enormously  efficient  with  RFID,  ”  says  the  sup¬ 
ply  chain  manager.  “My  issue  is  that  the  capa¬ 
bilities  required  to  have  a  successful  RFID 
initiative  don’t  exist  yet.  ”  HH 


Staff  Writer  Thomas  Wailgum  can  be  reached  at 
twailgum@cio.com. 


Seeing  Is  Believing 


Even  though  Wal-Mart’s  RFID  deadline  won't  be 
met,  that  doesn’t  mean  RFID  won’t  eventually 
make  its  way  into  stores.  To  get  a  full-motion 
view  of  how  RFID  is  going  to  move  along  the 
supply  chain,  watch  THE  BASICS  OF  RFID  AND 
EPC  video.  Find  the  link  at  the  online  version  of 
this  article  or  at  www.cio.com/printlinks. 

cio.com 


“I  don’t  think  RFID  is  a  mature  application 
at  this  point  and  time.  I  think  it’s  probably 
two  years  premature.” 

-SUPPLY  CHAIN  EXECUTIVE  FOR  BIG  WAL-MART  SUPPLIER 
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BUSINESS  PROCESS  MANAGEMENT: 


There  are  more  than  100  BPM  software  vendors,  all  selling 
something  different.  Here’s  how  to  figure  out  whether  you  need 
it  and  howto  make  itworkforyou.  by  ben  worthen 


Depending  on  whom  you  ask,  business  process  management 
(BPM)  software  helps  monitor  human  and  automated 
processes,  automate  previously  human  processes,  process 
something  still  managed  by  humans  or  manage  something  previ¬ 
ously  processed  by  humans. 

Confused?  You  should  be.  Gartner  estimates  that  there  are  cur¬ 
rently  over  100  BPM  vendors  out  there,  and  it  seems  that  no  two 
agree  on  what  it  is  they’re  selling.  So  which  definition  is  right?  “They 
all  are,”  says  Eric  Austvold,  a  research  director  at  AMR  research. 
“There  are  varying  degrees  of  rightness.  ”  Behind  the  hype,  BPM  is 
a  marketing  buzzword  for  various  software  applications  that  are 
useful  if  you  have  a  business  process  that  needs  improvement.  But 
for  a  BPM  product  to  be  useful  to  you,  rather  than  a  waste  of  time 


and  money,  it’s  important  to  choose  the  right  project  and  the 
appropriate  software. 

Here  are  a  few  things  that  different  BPM  products  can  do:  You 
can  buy  a  BPM  application  that  monitors  your  business  processes, 
automates  workflow  or  serves  as  an  enterprise  application  integra¬ 
tion  (EAI)  tool.  These  products  can  help  you  identify  areas  of  your 
business  that  need  to  be  automated,  enforce  business  rules  and  even 
help  you  integrate  your  existing  IT  infrastructure.  CIOs  who  have 
successfully  deployed  BPM  report  that  it  has  made  their  companies 
more  efficient.  For  the  most  part  the  software  is  relatively  inexpen¬ 
sive,  often  as  low  as  $100,000,  which  means  that  most  companies 
can  afford  some  version  of  BPM  if  they  want.  Happy  customers 
report  a  high  ROI,  often  between  200  and  300  percent. 
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Joe  Sferrazza,  CIO  with  AIC,  monitors 
updates  of  client  data. 


Brian  Cook,  acting  CIO  with  the  Star 
Alliance,  creates  a  blueprint  for  integration. 


Gary  Kirkham,  VP  with  ANICO,  guides 
call  center  employees. 


Reader  ROI 

►  The  types  of  business 
process  management 
software 

►  How  early  adopters  are 
using  BPM  software  to 
become  more  efficient 

►  What  to  consider  before 
you  buy 
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Business  Process  Management 


Getting  that  ROI,  though,  depends  on 
being  realistic  about  what  you’re  going  to 
accomplish.  Most  BPM  projects  don’t  make  a 
big  splash,  and  they  require  a  lot  of  work  up 
front.  Maneesh  Gupta,  information  systems 
chief  for  Prince  William  County,  Va.,  says  that 
installing  the  software  may  only  take  a  month, 
but  determining  beforehand  which  processes 
to  apply  it  to  can  take  six  months.  (Gupta  used 
it  to  improve  the  way  the  human  resources 
department  keeps  track  of  employee  per¬ 
formance  and  status.)  And  in  many  cases  the 
initial  investment  in  BPM  is  so  small  that  even 
a  return  of  200  percent  won’t  change  a  com¬ 
pany’s  margins.  “You  will  have  to  do  a  hun¬ 
dred  of  these  projects  before  the  CEO  will  ever 
see  the  results,”  says  Austvold. 

But  small  wins  are  still  wins,  and  that  makes 
it  worthwhile  to  sort  through  the  hype  about 
BPM  and  figure  out  how  it  can  help  you.  “Most 
processes  [in  business]  today  are  sophisticated 
and  complex,”  says  Gupta.  “They  are  not  lin¬ 
ear.  That  is  where  [BPM]  comes  into  play.” 

What  Is  BPM? 

A  decade  ago,  Michael  Hammer  pushed  the 
idea  that  process  reengineering  was  the  next 
business  revolution.  He  promised  companies 
that  if  they  overhauled  their  business  processes 
the  businesses  would  become  more  efficient. 
Most  businesses  that  bought  into  the  argu¬ 
ment  laid  a  lot  of  people  off,  but  the  expected 
efficiency  eluded  them.  In  part,  this  was 
because  it  was  hard  to  get  everybody  who  was 
left  to  agree  to  change  their  work  processes. 
And  in  part  because  even  if  they  did,  compa¬ 
nies  had  no  mechanism  to  enforce  the 
changes.  But  today,  the  concept  is  back  in  the 
guise  of  BPM  software,  which  provides  a  way 
to  monitor  and/or  enforce  efficient  business 
practices.  BPM  software  does  this  by  extract¬ 
ing  data  from  a  company’s  business  applica¬ 
tions  and  doing  one  of  two  things  with  it: 
tracking  how  the  information  is  used  to  per¬ 
form  a  task  so  that  you  can  map  an  existing 
business  process,  or  escorting  the  data 
through  a  set  of  tasks  to  ensure  that  a  business 
process  is  being  followed.  There  are  three 
basic  varieties  of  BPM  software:  monitoring 


tools,  workflow  software  and  tools  that  sup¬ 
port  EAI.  Here  is  a  look  at  each  type. 

EFFICIENCY  MONITORS 

BPM  monitoring  products  are  essentially  com¬ 
puterized  versions  of  the  1950s  efficiency  con¬ 
sultant  who  would  stand  next  to  the  assembly 
line  staring  at  a  stopwatch  through  “Coke-bot¬ 
tle”  glasses.  A  monitoring  product  uses  built-in 
application  programming  interfaces  to  connect 
with  each  of  the  systems  a  company  uses  for  a 
particular  process  (for  instance,  tracking  an 
order  from  the  time  it’s  placed  to  when  it  ships), 
and  then  monitors  the  process  for  inefficiencies. 
A  company  may  discover  that  there  is  a  consis¬ 
tent  12-hour  lag  between  the  time  a  product  is 
placed  in  the  shipping  queue  and  when  it  actu¬ 
ally  ships.  Then  it’s  up  to  the  company  to  figure 
out  a  solution.  (Maybe  it  hires  an  extra  loading 
dock  worker  or  invests  in  load-scheduling 


software. )  Monitoring  software  can  also  be  used 
to  keep  tabs  on  a  process  and  send  out  alerts 
when  the  correct  process  isn’t  being  followed. 

Canadian  mutual  fund  company  AIC  used 
BPM  monitoring  software  from  Sajus  to  speed 
up  its  process  for  updating  clients’  accounts 
whenever  there  is  a  transaction.  AIC  is 
Canada’s  largest  privately  held  mutual  fund 
company  with  approximately  $12  billion  in 
assets  under  management. 

Traditionally,  customer  transactions  would 
sic  in  a  queue  on  the  mainframe,  waiting  for  a 
nightly  update  to  AIC’s  shareholder  manage¬ 
ment  system.  That  meant  AIC  financial  advisers 
were  not  able  to  see  the  most  recent  transactions 
when  they  logged  on  to  AIC’s  Web-based  cus¬ 
tomer  portfolio  management  system. 

CIO  Joe  Sferrazza  thought  the  advisers 
should  have  this  information,  so  he  built  a 
Web  service  that  updates  the  client’s  account 


AIC  CIO  Joe  Sferr 
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Business  Process  Management 


American  National  Insurance  Company  has  experienced 
a  71  percent  reduction  in  caller  abandonment  since 

in  place. 


in  real-time  on  the  customer  portfolio  man¬ 
agement  system  that  the  advisers  use.  The 
mainframe  is  still  updated  nightly,  and  the 
client’s  account  information  in  the  portfolio 
management  system  is  rectified  against  the 
master  database  on  the  mainframe. 

Sferrazza  uses  the  Sajus  software  to  make 
sure  that  all  of  this  goes  off  without  a  hitch. 
The  BPM  software  monitors  the  process  and 
when  it  spots  a  problem  it  sends  an  alert  to  the 
appropriate  person  to  fix  it,  rather  than  wait¬ 
ing  for  a  person  to  detect  the  glitch  the  next 


time  they  look  at  the  customer’s  portfolio. 
Without  the  built-in  monitoring,  Sferrazza 
would  have  no  guarantee  that  the  automated 
processes  are  being  properly  executed. 

WORKFLOW  SOFTWARE 

Another  variation  on  the  BPM  theme  is  the 
workflow-based  products  that  companies  such 
as  Pegasystems,  Metastorm  and  FileNet  have 
developed.  These  systems  automate  some  parts 
of  a  business  process  and  direct  some  tasks  in 
the  business  process  to  people,  assuring  that  the 


process  is  followed.  For  example,  a  workflow 
BPM  system  won’t  let  a  sales  rep  open  a  new 
account  before  the  system  confirms  that  the 
client  doesn’t  already  have  an  existing  one.  The 
trick  to  using  BPM  software  to  automate  and 
enforce  a  business  process  workflow  is  that  the 
people  who  will  use  the  system  have  to  come 
up  with  a  detailed  map  of  the  processes  that 
they  want  the  system  to  follow  and  enforce. 
Therefore,  the  new  system  is  only  going  to  be  as 
good  as  the  processes  that  it  automates. 

American  National  Insurance  Company 
( ANICO)  used  BPM  workflow  software  from 
Pegasystems  to  improve  service  in  its  call  cen¬ 
ters.  In  the  mid-  to  late-1990s,  ANICO’s  call 
centers  experienced  high  drop  rates  and  high 
customer  frustration  levels  in  part  because  the 
information  that  agents  needed  was  hard  to 
access.  For  example,  in  the  health  insurance 
division,  a  customer’s  personal  information, 
HMO  information  and  policy  administration 
details  were  stored  in  multiple  legacy  systems. 
“Our  [agents]  were  navigating  multiple  sys¬ 
tems  while  trying  to  keep  someone  on  the 
phone,”  explains  Gary  Kirkham,  the  com¬ 
pany’s  vice  president  and  director  of  the  plan¬ 
ning  and  support  division. 

In  1998,  Kirkham  began  working  with 
Pegasystems  to  install  a  workflow  system 
(later  rebranded  by  the  company  as  a  BPM 
product)  that  would  guide  call  center  employ¬ 
ees  through  these  systems  and  give  them  a  log¬ 
ical  process  to  follow.  The  system  automatically 
extracts  information  from  each  of  the  legacy 
systems  and  delivers  it  to  agents  through  a 
common  user  interface. 

Before  Kirkham  could  automate  anything, 
though,  the  call  center  employees  had  to  come 
up  with  a  completely  new  business  process 
model.  While  Kirkham  met  extensively  with 
the  call  center  workers  to  explain  the  project 
(how  it  would  change  the  way  they  served  cus- 


BPM  software  allows  ANICO  VP  Gary 
Kirkham  to  guide  call  center  reps 
through  the  proper  steps  for  accessing 
customer  data. 
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Cutthroat  competition.  Intense  profit  pressure.  Price  erosion.  Declining  loyalty.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics-BI 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24x7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Visit  www.siebel.com/newgen 
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Business  Process  Management 


BPM  tools  tell  Star  Alliance  acting  CIO 
Brian  Cook  where  to  focus  enterprise 
application  integration  efforts. 


tomers  and  why  it  was  important  to  capture 
best  practices),  it  wasn’t  his  job  to  come  up 
with  and  document  these  processes.  That  role 
fell  to  Zeb  Miller,  the  company’s  assistant  vice 
president  for  health  administration.  Kirkham 
jokes  that  it  didn’t  hurt  that  Miller  is  6  feet  7 
inches  and  250  pounds. 

Now  when  a  customer  calls  with  a  question 
about  his  or  her  health  insurance,  the  BPM  soft¬ 
ware  prompts  the  service  rep  to  confirm  the 
caller’s  social  security  number  and  address 
before  getting  access  to  the  insurance  informa¬ 
tion.  Since  this  BPM  application  can  enforce 
workflow  rules,  the  call  center  employees  know 
what  types  of  services  they  are  allowed  to  pro¬ 
vide  based  on  who  the  caller  is. 

Call  center  workers  are  now  able  to  solve 
customers’  problems  faster,  which  in  turn 
allows  them  to  serve  more  customers.  Since 
putting  the  system  in  place,  ANICO  has  expe¬ 
rienced  a  71  percent  reduction  in  caller  aban¬ 
donment  and  a  61  percent  improvement  in 
the  average  time  it  takes  to  answer  the  phone. 
Furthermore,  this  type  of  project  is  easily 
repeatable.  While  Kirkham  started  small — 
just  putting  the  system  in  the  health-care  call 
center — it  is  now  being  used  to  support  other 
ANICO  insurance  products  as  well. 

ENTERPRISE  APPLICATION 
INTEGRATION  TOOLS 

Large  enterprise  application  vendors  and  sys¬ 
tem  integrators  have  used  the  fact  that  BPM 


has  application  program  interfaces  (APIs)  that 
extract  information  from  a  company’s  exist¬ 
ing  systems  to  push  it  as  an  enterprise  appli¬ 
cation  integration  tool.  In  other  words:  If  you 
are  going  to  integrate  your  systems,  why  not 
take  it  a  step  further  and  use  BPM  as  the  user 
interface  that  connects  to  your  middleware, 
regardless  of  what  that  middleware  might  be? 
IBM,  Tibco  and  other  integration  vendors 
have  bought  existing  BPM  software  compa¬ 
nies  and  adapted  their  applications. 

The  BPM  technology  used  with  EAI  isn’t 
substantially  different  from  the  monitoring  or 
workflow  varieties.  For  example,  Tibco 
acquired  Staffware,  a  workflow  vendor.  And 
the  way  companies  use  BPM  for  integration 
isn’t  all  that  different  either.  In  this  case,  BPM 
supports  larger  projects.  Forrester  Principal 
Analyst  Ken  Vollmer  warns  that  combination 
EAI/BPM  suites  are  capable  of  supporting 
larger  projects  and  are  generally  more  expen¬ 
sive  than  either  standalone  EAI  or  BPM  prod¬ 
ucts  would  be.  “Using  an  EAI/BPM  suite  in  a 
situation  that  could  be  handled  by  a  standalone 
BPM  product  could  add  another  $300,000  to 
the  cost  of  the  project,”  Vollmer  says. 

The  Star  Alliance,  a  partnership  of  1 5  major 
airlines,  including  United  and 
Lufthansa,  is  using  BPM  to 
help  integrate  its  members’ 
legacy  systems.  While  the  part¬ 
nership  is  committed  to  unify¬ 
ing  the  processes  that  its 
members  use,  it  is  equally 
committed  to  doing  so  in  a 
way  that  respects  each  com¬ 
pany’s  previous  investments. 

That’s  no  small  challenge, 
says  Brian  Cook,  Star  Alliance 
director  of  IT  and  acting  CIO, 
with  dozens  of  legacy  systems 
to  integrate.  For  example,  a 
new  service  for  frequent  fliers 
on  member  airlines  required 
the  IT  team  to  consolidate 
90  separate  business  pro¬ 
cesses  across  nine  airlines  and 
27  legacy  systems. 

This  kind  of  integration 
effort  could  quickly  spiral  out 


of  control,  says  Cook,  but  the  BPM  software 
helped  provide  a  blueprint  for  how  to  share 
data  among  the  various  systems.  The  Star 
Alliance  IT  and  airline  project  teams  used  the 
BPM  software  to  record  how  each  airline 
checked  in  customers  and  processed  their  fre¬ 
quent  flier  information.  Then,  airline  managers 
took  that  information  and  developed  a  new 
business  process  that  they  mapped  in  the  BPM 
application.  This  map  was  used  to  identify  the 
points  of  integration  for  each  legacy  system. 

How  to  Tell  if  BPM 
Is  Right  for  You 

The  vendors  will  tell  you  that  everyone  can 
benefit  from  BPM,  and,  like  all  hype,  there’s  a 
grain  of  truth  behind  it.  Almost  everyone  has  a 
business  process  that  needs  improvement.  The 
questions  you  need  to  ask  yourself  are:  What’s 
the  problem  you  are  trying  to  solve?  What’s 
the  size  of  the  investment  you  are  willing  to 
make  ?  And  how  committed  are  your  business 
units  to  making  their  processes  more  efficient? 

Forrester’s  Vollmer  says  that  an  EAI/BPM 
suite  is  a  way  to  get  more  from  your  existing 


Toolbox 

Leading  BPM  software  vendors: 


Monitoring 

Software 

Tracks  data  through 
a  business  process 

Agentis 

CommerceQuest 

Sajus 

Workflow 

Guides  employees 
through  a  business 
process 

FileNet 

Metastorm 

Pegasystems 

Savvion 


Enterprise 

Application 

Integration 

Provides  a  user  inter 
face  to  middleware 
applications 

BEA 

IBM 

Microsoft 
Oracle  (Customer 
Data  Hub ) 
PeopleSoft 
(AppConnect) 

SAP  (NetWeaver) 

SeeBeyond 

Tibco 

webMethods 


SOURCES:  Gartner,  Forrester  Research 
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TOTAL  SECURITY.  Can  your  network  detect,  isolate  and  eliminate  security  threats  before  they  become  security  breaches?  Whether 
intruders  come  from  across  the  world  or  across  the  hall,  AT&T’s  proactive  networking  solutions  can  identify  and  neutralize 
threats  long  before  they  have  a  chance  to  damage  your  data,  your  systems,  or  your  business.  CAN  YOUR  NETWORK  DO  THIS? 


AT&T 

The  world's  networking  companysM 


For  a  network  that  can,  call  1-888-889-0234 


att.com/networking 


Business  Process  Management 


systems,  since  this  type  of  solution  can  enable 
the  building  of  integrated  applications  with¬ 
out  necessarily  requiring  you  to  make  any 
other  technology  investments.  This  gives 
companies  a  tremendous  amount  of  flexibil¬ 
ity  when  determining  what  type  of  project  to 
pursue  and  which  BPM  vendor  to  work  with. 
But  Vollmer  also  says  that  common  sense 
plays  a  large  role  in  making  that  choice.  For 


cern  is  that  the  company  will  come  to  rely  too 
heavily  on  monitoring  software,  raising  his 
IT  costs.  “I  can  see  a  day  where  I  will  become 
so  dependent  |on  BPM]  that  I  need  several 
people  just  to  make  sure  that  the  processes 
are  being  monitored,”  he  says.  In  other 
words,  if  monitoring  is  the  key  to  automa¬ 
tion,  then  someone  needs  to  monitor  the 
monitoring  software. 


do,  besides  ignore  it”  and  hope  your  competi¬ 
tor  doesn’t  gamble  more  successfully. 

There  are  several  standards  for  BPM,  such 
as  the  emerging  Business  Process  Execution 
Language  (BPEL),  and  more  mature  Web 
standards,  such  as  Web  Services  Description 
Language  and  Java  Message  Service.  Soley 
says  every  vendor  uses  some  type  of  stan¬ 
dard,  and  you  need  to  choose  one  that  is 


Business  process  management  software  can  enable  the 
building  of  integrated  applications  without  necessarily 
requiring  you  to  make  any  other  technology  investments. 


example,  if  you  are  considering  an  enterprise 
application  integration  project,  he  says,  it  is 
also  wise  to  consider  whether  you  are  a  good 
candidate  for  BPM  in  the  near  future.  Since 
most  EAI  vendors  provide  both,  CIOs  should 
make  sure  that  combined  EAI/BPM  solutions 
are  evaluated  as  well  as  standalone  products  in 
each  category. 

On  the  other  hand,  most  BPM  users  prefer 
to  start  small.  One  reason,  warns  ANICO’s 
Kirkham,  is  because  process  change — partic¬ 
ularly,  the  type  of  radical  process  change  his 
company’s  call  center  employees  experi¬ 
enced — is  hard.  Trying  to  change  too  much  at 
once  could  be  counterproductive.  People  need 
time  to  learn  the  new  process  and  how  to  use 
the  BPM  software.  Just  as  business  process 
reengineering  failed,  BPM  will  fail  if  there  isn’t 
institutional  support  for  change.  Kirkham 
says  that  even  when  ANICO’s  employees  got 
training,  the  company  didn’t  really  gain  effi¬ 
ciency  until  they  hired  a  large  number  of  new 
workers  who  never  knew  the  old  process. 

AIC’s  Sferrazza  also  says  that  his  company 
isn’t  ready  to  undertake  a  project  on  a  grand 
scale,  although  he  does  plan  to  use  the  Sajus 
monitoring  tools  for  other  self-contained 
business  processes.  “We  can  effectively  mon¬ 
itor  our  systems,”  he  says.  And  for  now, 
AIC’s  focus  is  on  squeezing  the  last  bit  of  effi¬ 
ciency  out  of  that  monitoring.  His  other  con- 


What  to  Know 
Before  You  Buy 

AMR’s  Austvold  says  that  the  decision  about 
which  type  of  BPM  software  to  buy  comes 
down  to  knowing  what  your  goals  are.  Every¬ 
one  agrees  that  it  is  a  buyer’s  market  right  now 
and  that  CIOs  looking  for  a  bargain  on  BPM 
software  can  find  one.  But  CIOs  and  analysts 
all  caution  that  no  one  should  make  a  buying 
decision  based  on  the  deal  they  get.  With  the 
exception  of  large  integration  projects,  the 
money  involved  in  BPM  isn’t  that  great  and  it’s 
not  hard  to  get  an  ROI  from  the  right  project. 

Furthermore,  as  with  other  evolving  tech¬ 
nologies,  the  marketplace  is  bound  to  consol¬ 
idate.  Most  companies  that  sell  BPM  products 
are  small  and  those  products  address  one  type 
of  BPM  function.  There  is  always  a  chance 
that  your  vendor  could  go  out  of  business, 
leaving  you  to  support  a  product  yourself. 
Austvold  says  the  products  from  small  com¬ 
panies  are  often  better,  however. 

“You  have  a  couple  of  choices,”  says 
Richard  Soley,  CEO  of  the  standards  organi¬ 
zation  the  Object  Management  Group.  “Go 
with  a  large  vendor  who  you  don’t  think  is 
going  away  or  you  go  with  a  [smaller  vendor 
that  uses  a]  standard.  Obviously  [this  sounds] 
self-serving,  but  I  don’t  see  what  else  you  can 


compatible  with  your  existing  applications. 
Finding  out  if  a  vendor  uses  standards  should 
be  part  of  your  due  diligence  process  before 
you  buy. 

Success  with  BPM 

Success  comes  down  to  a  few  simple  steps.  First, 
make  sure  that  you  have  a  specific  process  in 
mind  that  you  would  like  to  improve  with  a 
BPM  product.  Next,  monitor  the  process  to 
learn  how  it  works  now.  (You  can  use  BPM 
monitoring  software  to  do  this. )  Then,  you  and 
the  process  owner  need  to  figure  out  how  you 
want  to  change  the  process  and  redesign  it 
accordingly.  If  it’s  appropriate,  you  can  use  a 
BPM  workflow  application  to  manage  the 
new  process. 

Cook  of  the  Star  Alliance  says  that  a  suc¬ 
cessful  BPM  project  leaves  a  company  with  a 
documented  set  of  business  rules  that  could 
prove  to  be  its  important  intellectual  prop¬ 
erty,  as  well  as  provide  a  road  map  for  future 
development  of  IT  projects.  “It’s  hard  to 
extract  and  document  years  of  experience,” 
he  says.  “You  end  up  with  tons  of  informa¬ 
tion.  But  it  ends  up  making  [future  projects] 
much  easier  for  IT.  ”  HE] 


Feel  free  to  contact  Senior  Writer  Ben  Worthen  at 
bworthen@cio.  com . 
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These  days,  no  network  is  free  of  threats.  That’s  why  you  have  to  assign  network  security  privileges  to  everyone. 
Employees,  customers,  and  partners.  You  need  to  set  an  acceptable  use  policy  that  dictates  what  each  of  them  can 
and  can’t  access.  Until  now,  you  had  to  do  this  manually. 


Not  anymore.  Now  you  can  do  what  Baylor  University  did.  Implement  an  Enterasys  Secure  Networks™  solution  with 
a  unique,  policy-based  system  that  empowers  the  network  to  allocate  resources  based  on  specific  users  and  their 
roles.  The  network  “sees’’  who  the  user  is  and  assigns  privileges  accordingly.  This  improved  control  also  gives  you 
more  security. 

It’s  all  about  giving  you  a  smarter  way  to  network  with  central,  intuitive  management.  Find  out  more  hv  visiting 
networksthatknow.com/Baylor.  Or  ask  any  one  of  the  many  enterprise  customers  we’ve  worked  with  for  years. 
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A  Travel 
Guide  to 


To  arrive  at 
collaboration, 
companies  will 
need  to  get  over 
theirwin-lose 
mentality  and 
solve  a  host 
of  technical  and 
cultural  challenges. 
Here’s  a  TripTik 
for  the  journey. 


BY  ALICE  DRAGOON 


ILLUSTRATIONS  BY  SERGE  BLOCH 


!  The  value  of  working  together,  or  collaborating, 

has  been  instilled  in  us  since  kindergarten.  And  in  this  era  of  globalization,  out¬ 
sourcing  and  tightly  linked  supply  chains,  you’d  think  few  companies  would 
even  contemplate  going  it  alone.  But  companies  aren’t  kindergartners.  When 
the  CIO  of  one  of  the  nation’s  largest  insurance  companies  (who  asked  not  to  be 
identified)  floated  the  concept  of  collaborating  with  several  major  insurance 
players  to  create  an  industrywide  billing  system,  the  idea  was  rebuffed.  IT  exec¬ 
utives  at  the  other  insurance  companies  viewed  their  individual  billing  systems 
as  strategically  competitive,  a  notion  the  CIO  found  absurd.  Billing,  after  all,  is 
a  quintessential  back-office  utility. 


Such  conservative — perhaps  antiquated — notions  of  competitiveness,  along 
with  lack  of  trust,  security  concerns,  cost  and  complexity,  have  prevented  business- 
to-business  collaboration  from  becoming  the  next  big  business  wave  for  some 
time.  But  this  is  starting  to  change. 

“As  communications  costs  fall,  it  becomes  possible  and  desirable  for  many 
more  people  and  organizations  to  collaborate  in  ways  that  would  never  have 
been  feasible  before,”  says  Tom  Malone,  a  professor  at  the  MIT  Sloan  School  of 
Management,  founder  and  director  of  the  MIT  Center  for  Coordination  Science, 

and  author  of  The  Future  of  Work. 

Nate  Root,  a  collaboration  analyst  at 
Forrester,  concurs.  “It’s  undeniable  that  elec¬ 
tronic  communication  and  collaboration 
between  companies  is  increasing.  It’s  not  too 
much  of  a  stretch  to  call  supply  chain  automa¬ 
tion — electronic  integration  with  suppliers  and 


Reader  ROI 

►  Identify  the  diverse  forms  of 
B2B  collaboration 

►  Best  practices  for  solving 
technical,  cultural  and  other 
challenges 
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partners — a  form  of  collaboration.  When  you 
cast  the  net  that  broadly,  collaboration  tech¬ 
nology  is  on  a  screaming  increase,  and  has 
been  since  the  dotcom  boom.” 

But  how  wide  should  we  cast  the  net?  Is 
every  intercompany  communication  worthy 
of  the  collaboration  label  ?  Not  only  is  the  def¬ 
inition  of  collaboration  itself  controversial, 
but  as  more  companies  get  serious  about  part¬ 
nering,  the  best  practices  are  still  being 
defined.  Despite  the  uncertainties,  CIOs  need 
to  have  collaboration  on  their  radar  now,  since 
technology  plays  a  key  enabling  role  in  suc¬ 
cessful  collaborations.  “Collaboration  is 
becoming  more  and  more  important  and 
higher  on  my  agenda  personally  and  for  IT  in 
general,”  says  Filippo  Passerini,  global  busi¬ 
ness  services  officer  at  Procter  &  Gamble. 
“We  must  be  able  to  network  with  other 
organizations,  companies  and  partners  in  a 
collaborative  fashion.” 

For  CIOs  in  the  aerospace  industry,  where 
next-generation  jets  are  being  designed  by 
engineers  working  together  from  around  the 
globe,  collaboration  also  figures  prominently 


on  the  agenda.  “Collaboration  is,  in  this 
decade,  what  MRP  II  was  in  the  ’80s  or  supply 
chain  management  and  CRM  were  in  the 
’90s,”  says  Boeing  CIO  Scott  Griffin.  “The 
technology  is  getting  to  the  point  where  you 
literally  can  work  together  as  if  you  were  in 
the  same  company.” 

To  help  would-be  collaborators  understand 
the  lay  of  the  land,  this  guide  to  collaboration 
offers  an  overview  of  types  of  collaboration 
and  their  benefits,  a  look  at  potential  chal¬ 
lenges,  and  a  roundup  of  collaboration  best 
practices  and  technologies  that  companies 
such  as  Procter  &  Gamble,  the  Chicago  Mer¬ 
cantile  Exchange,  BAE  Systems  and  Visa  are 
leveraging  to  make  collaboration  pay  off. 

Who’s  Collaborating? 

Although  some  vendors  might  have  you  think 
otherwise,  collaboration  is  not  a  synonym 
for  communication.  (E-mail  and  even  the 
telephone  can  support  collaboration,  but  com¬ 
munication  alone  does  not  constitute  collabo¬ 
ration.)  In  its  purest  form,  collaboration 


consists  of  two  or  more  individuals  or  compa¬ 
nies  working  together  to  achieve  a  common 
goal  or  create  mutual  value.  By  combining 
resources — whether  that  means  sharing  cus¬ 
tomer  information,  supply  chain  data,  intellec¬ 
tual  property  or  R&D  expertise — collaborators 
jointly  create  what  they  cannot  produce  effi¬ 
ciently  on  their  own.  Forms  of  collaboration 
can  be  classified  by  the  relationship  between 
the  collaborating  parties,  which  often  sets  the 
tone  for  the  partnership. 

BETWEEN  COMPETITORS:  As  the  insurance 
CIO  found  out,  collaboration  among  com¬ 
petitors  is  the  most  difficult  and  delicate  form 
of  partnership.  But  archrivals  Procter  & 
Gamble  and  Clorox  have  managed  to  make 
it  work.  The  two  packaged  goods  companies 
compete  fiercely  in  the  cleaning  products  and 
water  purification  categories,  yet  both  prof¬ 
ited  when  Press’n  Seal,  a  new  plastic  wrap 
based  on  breakthrough  P&G  technology, 
went  to  market  under  Clorox’s  well- 
established  Glad  brand.  P&G  invented  a  new 
plastic  wrap  that  seals  tightly  only  where 
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pressed  (and  won’t  stick  elsewhere).  But  the 
company  didn’t  have  any  products  in  the  plas¬ 
tic  wrap  category  and  executives  realized  that 
a  joint  venture  with  Clorox  would  be  more 
profitable  than  investing  the  resources  to 
establish  a  meaningful  P&G  presence  in  a  new 
category.  So  it  shared  the  science  behind 
Press’n  Seal  with  Clorox  in  a  deal  that  got 
P&G  a  10  percent  stake  in  the  Glad  business 
(with  an  option  to  buy  another  10  percent 
stake)  and  a  cost-effective  entry  into  the  plas¬ 
tic  wrap  business.  Clorox  got  to  introduce  a 
new  product  in  a  dormant  category  and 
gained  access  to  P&G’s  substantial  R&D 
pipeline  for  products  in  the  plastic  wrap,  bags 
and  containers  business,  on  an  ongoing  basis. 
Today,  Glad  commands  49  percent  of  the  plas¬ 
tic  wrap  category,  up  23  points  from  before 
the  introduction  of  Press’n  Seal  in  2003.  And 
the  collaboration  continues  with  the  recent 
introduction  of  Glad  ForceFlex  trash  bags, 
which  are  made  of  strong  but  stretchable  plas¬ 
tic  developed  by  P&G. 

A.G.  Lafley,  P&G’s  CEO,  is  so  bullish  on 
the  concept  of  collaboration  that  he’s  made  it 
a  corporate  priority,  setting  a  goal  of  sourcing 
50  percent  of  the  company’s  innovation 
externally.  For  a  company  that  long  prided 
itself  on  developing  all  of  its  products  inter¬ 
nally,  working  with  outsiders  to  bring  new 
products  to  market  is  a  major  cultural  shift. 
“In  our  R&D  organization  we  have  7,500 
people  in  150  science  areas,  but  there  are  1.5 
million  high-quality  people  outside  P&G,” 
says  Larry  Huston,  vice  president  of  R&D 
Innovation  and  Knowledge.  “You  can’t  pos¬ 
sess  all  the  science  and  brilliant  minds.  If  you 
try  to  invest  in  all  the  different  science  areas  rel¬ 
evant  to  you  and  be  world  class,  the  costs  will 
be  prohibitive.” 

BETWEEN  FRIENDS:  Although  outsiders 
consider  the  Chicago  Mercantile  Exchange 
(CME)  and  the  Chicago  Board  of  Trade 
(CBOT)  to  be  fierce  crosstown  rivals,  the  two 
trading  organizations  have  not  viewed  things 
that  way.  And  in  fact,  they  have  a  lot  in  com¬ 
mon:  They  share  a  large  number  of  cus¬ 
tomers,  and  both  must  process  all  the  trade 
transactions  that  they  broker.  In  the  past, 


CME  maintained  its  own  clearing  function 
and  CBOT  outsourced  to  a  third-party  clear¬ 
ing  organization;  both  required  their  cus¬ 
tomers — financial  institutions  conducting 
trades — to  put  up  funds  to  guarantee  their 
trades.  The  organizations  saw  an  opportu¬ 
nity  to  build  a  joint,  Web-enabled  clearing 
system  that  would  be  more  streamlined  than 
the  pair’s  previous  systems  yet  provide  more 
sophisticated  trading  details.  Now  traders 
can  put  up  money  once  to  guarantee  trades 
on  both  exchanges.  The  system  also  can  save 
money  for  traders — money  that  can  be  rein¬ 
vested  in  the  market,  increasing  volume  for 
both  trading  exchanges.  “If  someone’s  trad¬ 
ing  our  Dow  against  [CME’s]  S&P,  they’re 
looking  at  up  to  a  90  percent  savings  in  terms 
of  margin  offsets,”  says  Brian  Durkin,  exec¬ 
utive  vice  president  and  chief  operating  offi¬ 
cer  at  CBOT 

IN  THE  FAMILY:  Although  collaboration 
between  companies  may  garner  more  atten- 

Companies 
withawin-lose 
orientation 
tend  to  view 
their  internal 
information 
as  highly 
proprietary 
when  in  fact 
some  of  it  might 
be  safely— and 
profitably- 
shared. 


tion,  internal  collaboration  between  far-flung 
or  diverse  business  units  can  often  generate 
remarkable  efficiencies  or  create  value  in 
product  lines.  Before  P&G  opened  the  doors 
to  external  collaboration,  the  company  was 
already  working  hard  to  transfer  knowledge 
internally.  For  example,  collaborating  P&G 
researchers  applied  paper  engineering  know¬ 
how  from  the  company’s  paper  towel  busi¬ 
ness  to  its  home-care  group’s  Swiffer  mops. 
Research  on  calcium  done  for  the  laundry 
and  toothpaste  categories  led  to  insights  for 
Actonal,  P&G’s  osteoporosis  drug.  And  com¬ 
bining  expertise  in  cleaning  technologies  led 
researchers  to  develop  Olay  Age-Defying 
Cleansing  Cloths. 

Danger  Zones 

You’d  never  begin  a  walking  tour  of  a  new 
city  without  first  asking  about  dangerous 
neighborhoods,  nor  would  you  pack  for  a  trip 
to  an  exotic  destination  without  checking  on 
the  climate  and  terrain.  Likewise,  if  you’re 
aware  of  the  dangers  that  can  waylay  collab¬ 
orators,  you’ll  be  in  a  better  position  to  plan 
a  sensible  route  to  avoid  them. 

WIN-LOSE  MENTALITY  AND  MISTRUST: 

One  of  the  biggest  threats  to  collaboration 
success  is  the  win-lose  mentality  embedded 
in  our  culture.  “Many  people  in  the  past 
assumed  that  in  dealings  with  other  com¬ 
panies  the  goal  was  to  maximize  their  own 
benefits  and  minimize  the  benefits  of  the 
other  party,”  says  MIT’s  Malone.  And  that 
attitude  applies  not  just  to  direct  competi¬ 
tors,  but  even  in  many  cases  to  dealings 
with  customers  and  suppliers.  “When  you 
have  that  mental  model,  it’s  hard  to  collab¬ 
orate  effectively,”  he  says. 

P&G’s  Jeff  Weedman,  vice  president  of 
external  business  development,  once  nego¬ 
tiated  a  deal  with  another  company  that 
was  weighted  heavily  in  P&G’s  favor. 
Although  everyone  at  P&G  congratulated 
him  at  the  time,  he  now  sees  it  as  one  of  the 
worst  deals  he  ever  did.  There  was  so  little 
value  on  the  other  side  that  the  collaborat¬ 
ing  company  backed  out  as  soon  as  another 

7  1 


\NWW.c\o.com  •  NOVEMBER  15,  2004  CIO 


Collaboration 


more  attractive  opportunity  came  along. 

Companies  with  a  win-lose  orientation 
tend  to  view  all  of  their  internal  information 
as  highly  proprietary  when  in  fact  some  of 
it  might  be  safely — and  profitably — shared 
in  collaborative  ventures.  “It’s  easy  to  get 
paranoid  and  say  you’re  not  going  to  share,” 
says  M.  Eric  Johnson,  professor  and  direc¬ 
tor  of  the  Center  for  Digital  Strategies  at 
Dartmouth’s  Tuck  School  of  Business.  It 
starts  at  the  top.  If  executives  on  both  sides 
don’t  quite  trust  each  other,  “the  whole 
process  is  constantly  being  slowed  by  cau¬ 
tiousness,”  says  Johnson. 

INTELLECTUAL  PROPERTY  OWNERSHIP 
DISPUTES:  One  of  the  thorniest  challenges 
in  B2B  collaboration  is  how  to  divvy  up  own¬ 
ership  of  any  resulting  intellectual  property. 
Although  a  collaboration  between  Hewlett- 
Packard  and  Canon  produced  the  highly  suc¬ 


cessful  laser  jet  printer,  Canon  put  a  strain  on 
the  relationship  when  it  began  marketing  its 
own  laser  jet,  says  Johnson.  If  you  don’t  work 
out  IP  ownership  ahead  of  time,  it  might 
strain  the  collaboration  or  constrict  the  free 
flow  of  ideas  between  companies. 

On  the  other  hand,  placing  too  much 
emphasis  on  IP  ownership  can  have 
an  equally  chilling  effect.  “Having  lawyers 
drive  collaborative  initiatives  is  like  having 
drunk  drivers  drive  Pintos  on  New  Year’s  Eve 
in  Boston,”  says  Michael  Schrage,  codirec¬ 
tor  of  the  MIT  Media  Lab’s  eMarkets  Initia¬ 
tive  and  author  of  No  More  Teams!  “That’s 
an  algorithm  for  tragedy.  The  fruits  of  IP 
are  very,  very  important.  But  we  need  to 
design  B2B  collaboration  interactions  in 
a  way  where  co-licensing  is  understood  to  be 
of  mutual  benefit.  If  you  constantly  believe 
that  IP  is  the  critical  thing,  you  probably 
shouldn’t  be  collaborating.” 


INSECURITY:  Companies  should  be  rightly 
concerned  about  sharing  data  with  would-be 
collaborators  that  have  not  invested  ade¬ 
quately  in  security.  “A  lot  of  big  OEM  firms 
have  spent  a  lot  of  money  on  security,”  says 
Johnson.  “They’re  like  the  guys  in  bulletproof 
Cadillacs  in  the  inner  city.  But  as  soon  as  they 
step  out  into  the  supply  base,  they  find  a  much 
different  story.”  And  even  if  a  potential  part¬ 
ner  has  shipshape  security,  many  companies 
are  leery  of  having  any  of  their  data  stored  on 
someone  else’s  servers  because  they  can’t  con¬ 
trol  what  happens  to  it.  “You  don’t  want  your 
data  on  another  network  because  you’re  not 
sure  who  has  access,”  says  Rene  Nibbelke, 
program  manager  of  e-collaboration  at  aero¬ 
space  and  defense  heavyweight  BAE  Systems. 

INTEGRATION  HASSLES:  Even  if  companies 
overcome  the  security  concerns,  there  remains 
the  challenge  of  configuring  systems  to  share 
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When  supporting  person-to-person  or  group-to-group  collaboration, 
think  about  the  complexity  of  the  interaction  and  whether  individuals 
or  teams  will  be  working  together  in  real-time  or  on 
their  own  schedules 


Work  Style 


Collaborators 
work  simultane¬ 
ously  in  real-time 
or  individually  in 
their  own  time 


Own  time 


Real-time 


Own  time, 

but  some 
workspaces 
offer  Web 
conferencing 


Real-time 


Good  for.. 


Sharing  information  with 
one  or  more  parties 


Multiple-location  meetings, 
complex  discussions  and 
real-time  decision  making 


Shared  access  to 
documents,  tools  and 
experts;  managing  team 
interactions 


Not  good  for.. 


Complex,  multi-party 
discussions  ortime- 
sensitive  messages 


Document  retention, 
audittrails 


Real-time  collaboration  and 
quick  decision  making 


Quick  reaction  to  problems/  Complicated  discussions 
issues  and  answers  to  among  many  people 

questions 


Important  Issues 


Systems  are  interoperable; 
messages  can  get  over¬ 
looked  or  lost;  archives  can 
be  difficult  to  manage 

Allows  application  and  video 
sharing,  and  can  integrate 
with  teleconferencing 


Can  be  difficult  to  implement 
across  organizations 


Some  IM  tools  offer 
archiving;  lack  of  system 
interoperability; 
questionable  security 


‘Percentage  of  companies  currently  using  the  technology  based  on  a  2004  AMR  Research  survey  of  318  IT  managers  of  manufacturing  and  service  companies. 
SOURCES:  Patricia  Seybold  Group.  AMR  Research,  CIO  reporting 
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data  and  talk  to  one  another.  Web  services  has 
a  lot  of  potential,  but  it’s  by  no  means  a  magic 
bullet.  “We  use  Web  services  today,  and  the 
intent  is  to  help  people  solve  [integration] 
problems,”  says  Scott  Thompson,  executive 
vice  president  at  Inovant,  Visa’s  IT  organiza¬ 
tion  responsible  for  transaction  processing. 
“But  you  still  have  to  do  collaboration  and 
have  security  people  from  both  organizations 
agree”  on  how  they’ll  work  around  the  secu¬ 
rity  measures  and  firewalls  that  each  has  in 
place.  The  bottom  line  is  companies  that  want 
to  share  data  must  slog  through  the  integra¬ 
tion  quagmire,  and  wrestle  with  nitty-gritty 
details  like  incompatible  data  definitions  as 
well  as  security  issues. 

Incompatible  data  can  be  an  integration — 
and  collaboration — showstopper.  Thomp¬ 
son  says  Visa  has  in  the  past  had  to  walk 
away  from  what  he  calls  “really  great  prod¬ 
uct  ideas”  proposed  by  would-be  collabora¬ 
tors  because  the  two  organizations  couldn’t 
resolve  technical  or  security  differences.  And 
the  source  of  contention  can  be  something 
as  simple  as  the  maximum  allowable  size  of 
a  message  field.  “When  you  see  something 
you  know  could  work  and  should  work  but 
you  can’t  get  your  technology  or  security 


people  to  agree,  it’s  a  shame,”  says  Thomp¬ 
son.  “And  it  probably  happens  more  than 
you’d  think.” 

How  to  Get 
There  from  Here 

Once  you  understand  the  challenges  that  dot 
the  collaborative  landscape,  you  can  map  out 
best  practices  to  work  around  them. 

CLARIFY  THE  MUTUAL  VALUE:  As  P&G 

learned  the  hard  way  with  its  one-sided  deal 
that  ultimately  failed,  collaborations  won’t 
last  if  both  sides  don’t  stand  to  gain  from  the 
relationship  or  see  enough  potential  value  to 
justify  the  risk.  “To  succeed,  everyone  has  to 
be  creating  substantial  value  and  gaining  value 
out  of  it,”  says  Johnson.  “When  you  start  a 
project,  you  need  to  think  carefully  about  who 
is  creating  value  and  how  that  value  is  going  to 
be  shared.  If  that’s  clear,  the  relationship  is  typ¬ 
ically  much  more  stable.”  One  partner  may 
deservedly  reap  a  greater  portion  of  the  bene¬ 
fit  from  a  collaboration,  but  both  sides  should 
feel  like  they’re  getting  a  fair  cut,  and  enough 
to  make  it  worth  their  while.  You’ve  got  to 
find  the  sweet  spot  of  the  deal,  when  each  side 


sees  significant  upside  potential. 

In  Alberta,  Canada,  executives  at  the 
Department  of  Energy,  the  Energy  and  Utili¬ 
ties  Board  (EUB),  and  Alberta’s  oil  and  gas 
industry  recognized  the  mutual  value  of  col¬ 
laborating  on  an  initiative  to  build  a  Web- 
based  application  to  manage  the  collection, 
sharing  and  storing  of  data  on  oil  production, 
equipment  and  royalty  payments.  The 
Department  of  Energy  needs  data  about  the 
volume  of  oil  and  gas  being  extracted  from 
government-owned  lands  to  charge  royalties 
to  the  producers.  The  EUB  needs  that  data  to 
ensure  that  industry  is  complying  with  safety 
and  environmental  regulations.  And  oil  and 
gas  producers  need  to  keep  track  of  monthly 
production.  Although  the  three  groups  were 
nervous  about  sharing  information,  the 
clearly  defined  benefits  all  around  justified  the 
risk.  And  taking  the  time  to  spell  out  those 
benefits  up  front  helped  pave  the  way  for  suc¬ 
cess.  Today,  the  Web-based  Petroleum  Reg¬ 
istry  of  Alberta  has  eliminated  the  need  for 
1.5  million  pages  of  paper  reports  annually. 
Volume  and  infrastructure  data  that  the  three 
groups  need  is  now  collected  and  reported  in 
standard  format,  giving  everyone  better  access 
to  more  reliable  data.  The  process  of  collecting 
royalties  has  been  streamlined  and  producers 
end  up  paying  fewer  penalties  for  having  inac¬ 
curate  information  and  fewer  royalty  over¬ 
payments  because  the  volume  information  is 
more  accurate. 

BUILD  TRUST:  If  the  value  that  both  sides  are 
bringing  to  the  table  is  clearly  understood, 
trust  can  be  easier  to  establish.  It’s  essential  to 
sort  through  dif  ficult  issues  like  what  happens 
when  a  joint  venture  creates  new  IP  (who 
owns  it?  who  gets  free  access  to  it  and  who 
pays  for  it?)  up  front.  If  you  postpone  the 
tough  negotiations,  Weedman  says,  the  trust 
will  be  sorely  tested  and  the  team  will  become 
dysfunctional  when  those  unresolved  issues 
crop  up  later.  It’s  also  important  to  the  rela¬ 
tionship  to  establish  ground  rules  at  the  outset, 
including  an  issue  resolution  and  sign-off 
process  that  will  ensure  involvement  of  the  key 
stakeholders  in  major  decisions.  P&G  always 
hammers  out  dispute  resolution  processes  as 
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part  of  its  collaboration  agreements,  making 
sure  that  those  responsible  for  settling  tough 
disputes  generally  aren’t  the  people  running 
the  project  on  a  daily  basis. 

Open  and  honest  communication  is  the 
cornerstone  of  trust.  “The  best  way  to  build 
trust  is  to  be  up  front  about  our  needs  and  be 
willing  to  accommodate  others’  needs,”  says 
Weedman.  “Any  relationship  has  to  be  win- 
win  in  order  to  be  successful.” 

PROVIDE  THE  RIGHT  TOOLS:  Schrage  main¬ 
tains  that  true  collaboration  simply  isn’t  pos¬ 
sible  without  the  creation  and  maintenance  of 
a  shared  space.  “It  takes  a  shared  space  to  cre¬ 
ate  shared  understanding,”  he  says.  “If  there’s 
no  shared  space,  there’s  no  collaboration. 
Period.  ”  Technologies  that  create  shared  space 
and  tools  for  collaboration  fall  into  two  cate¬ 
gories:  real-time  and  asynchronous/persistent 
(see  “Tool  Choice,”  Page  72). 

Real-time  technologies,  such  as  Web  con¬ 
ferencing  and  instant  messaging,  require  col¬ 
laborators  to  log  on  at  the  same  time  to,  say, 
conduct  an  online  meeting  to  review  design 
specs  or  to  resolve  an  issue  by  chatting 
through  IM.  Asynchronous  tools,  such  as 
online  collaborative  workspaces  and  e-mail, 
allow  collaborators  to  contribute  on  their  own 
schedule,  a  particularly  useful  feature  for  man¬ 
aging  projects  that  span  time  zones.  Work¬ 
spaces  such  as  Microsoft’s  SharePoint, 
IBM/Lotus’s  Workplace  and  several  industry- 
specific  tools  (including  PTC’s  Windchill  Pro- 
jectLink  for  the  manufacturing  industry,  Agile 
for  the  high-tech  industry  and  Freeboarder  for 
the  apparel  industry)  provide  an  electronic 
medium  for  collaborating,  offering  capabili¬ 
ties  such  as  messaging,  calendaring,  document 
management  and  workflow  automation. 
Users  can  see  what  their  colleagues  are  doing, 
and  everyone  with  appropriate  access  cre¬ 
dentials  can  view — and  add  comments  to — 
the  latest  version  of  a  document. 

Asynchronous  tools  also  serve  as  a  persist¬ 
ent,  always  accessible  archive  for  discussions 
and  document  versions,  keeping  track  of  who 
decided  what  and  when.  This  can  be  especially 
valuable  for  supporting  sophisticated,  long¬ 
term  collaborations  and  for  building  trust.  “ In 
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-MICHAEL  SCHRAGE,  CODIRECTOR  OF 
MIT  MEDIA  LAB'S  EMARKETS  INITIATIVE 

many  ways,  it  creates  trust  if  during  any  devel¬ 
opment  process,  you  know  that  all  informa¬ 
tion  will  be  saved  as  a  conversation,”  says 
Johnson.  “Everyone  will  know  how  the  prod¬ 
uct  developed,  how  it  changed.  There’s  not  a 
feeling  that  maybe  someone  did  something  or 
changed  something  and  you  didn’t  know.” 

The  line  between  real-time  and  asynchro¬ 
nous  tools  is  beginning  to  blur,  however,  as 
some  collaboration  tools  are  starting  to  offer 
both  real-time  and  asynchronous/persistent 
functionality.  Archiving  is  now  possible  with 
some  IM  products,  for  example,  and  Groove 
Networks  supports  real-time  communica¬ 
tions  within  its  asynchronous,  peer-to-peer 
workspace.  IBM  has  added  real-time  func¬ 
tionality  to  its  Workplace  products.  The  pres¬ 
ence  awareness  feature  of  IM  (which  indicates 
whether  users  are  currently  online)  is  also  find¬ 
ing  its  way  into  some  collaborative  work¬ 
spaces  and  meeting  technologies.  Convoq 
ASAP,  for  instance,  initiates  online  meetings 
as  soon  as  all  are  present. 

For  B2B  collaborations,  establishing  a 
shared  workspace  on  neutral  territory,  admin¬ 
istered  by  a  third  party,  can  help  put  collabo¬ 
rators  on  equal  footing  and  allay  concerns 
about  who  controls  shared  data.  Groove  Net¬ 
works’  peer-to-peer  collaboration  software 


and  the  hosted  version  of  EMC/Documen- 
tum’s  eRoom  service  avoid  the  problems  that 
arise  when  a  single  company  owns  the  collab¬ 
orative  space.  “It  creates  much  more  of  a  peer 
relationship,”  says  David  Marshak,  senior 
vice  president  at  Patricia  Seybold  Group. 
“When  one  company  owns  it,  the  other  com¬ 
pany  is  subservient.” 

Web  portals  can  also  be  a  powerful  tool  for 
enabling  collaboration.  P&G  developed  an 
internal  website  known  as  InnovationNet  in 
1997  to  encourage  knowledge  sharing  and 
collaboration  among  the  company’s  widely 
dispersed  researchers.  But  since  CEO  Lafley’s 
push  to  expand  external  collaboration  began 
in  2002,  Michael  Telljohann,  P&G’s  associ¬ 
ate  director  of  corporate  IT,  has  been  broad¬ 
ening  the  site  to  give  P&G  researchers  access 
to  would-be  collaborators  on  the  outside. 
Researchers  who  want  help  tackling  thorny 
scientific  problems  can  now  use  Innovation- 
Net  to  post  queries  to  external  networks  of 
scientists,  such  as  Innocentive,  a  network  of 
chemists  assembled  by  pharmaceutical 
manufacturer  Eli  Lilly,  or  Nine  Sigma,  a  sim¬ 
ilar  network  of  research  labs.  Telljohann’s 
group  developed  custom  workflows  to  walk 
researchers  through  the  process  of  refining 
and  posting  queries;  vetted  responses  are 
delivered  online  or  via  e-mail.  InnovationNet 
has  made  it  easy  for  P&G  researchers  to  hook 
up  with  such  unlikely  collaborators  as  a  patent 
attorney  in  North  Carolina,  a  graduate 
student  in  Spain  and  a  chemist  in  Bangalore. 

MINIMIZE  NEED  FOR  INTEGRATION:  System- 
to-system  integration  using  EDI  or  Rosettanet 
can  be  time-consuming  and  costly.  “It  looks 
very  easy  on  paper,  but  is  tougher  when  you 
get  down  at  the  data-element  level  and  have 
to  match  it  all  up,”  says  Mike  MacKenty,  vice 
president  of  IT  and  supply  chain  services  at 
Nypro,  a  precision  molding  and  contract 
manufacturing  company  that  collaborates 
with  global  cell  phone,  automotive  and  PC 
manufacturers.  Although  he’s  done  integra¬ 
tion  with  EDI  countless  times,  MacKenty  says 
there  are  no  best  practices  for  making  it  easier. 
“At  the  end  of  the  day,  it’s  work  every  time,” 
he  says. 


www.cio.com  •  NOVEMBER  15,  2004  CIO  75 


Collaboration 


But  on  occasion,  it’s  possible  to  use  less 
complex  methods  to  share  data  than  full¬ 
blown  systems  integration.  MacKenty  sets  up 
extranet  sites  to  post  operational  data  for  part¬ 
ners.  “The  investment  required  to  make  it 
happen  is  not  that  much,  it’s  more  on  the 
processside,”  hesays.  “But  the  payoff  can  be 
tremendous  if  you  both  work  off  the  same  for¬ 
mats,  the  same  information.” 

It’s  also  possible  to  avoid  integrating 
systems  by  using  the  shared  workspace.  BAE 
Systems,  Boeing,  Lockheed  Martin,  Raytheon 
and  Rolls-Royce  all  banded  together  to  cre¬ 
ate  a  common  workspace  for  collaboration 
with  suppliers  and  business  partners.  Called 
ForumPass,  this  pay-as-you-go  shared  work¬ 
ing  environment  is  secure  and  offers  such  col¬ 
laborative  functionality  as  integrated  online 
meetings  and  workflow.  Collaborators  don’t 
need  to  deal  with  the  hassles  of  integrating  sys¬ 
tems  or  invest  in  a  specific  technology  as  a  pre¬ 
condition  of  working  with  business  partners; 
they  just  need  Web  access  and  money  to  pay 
for  the  service.  If  a  collaboration  proposal  or 
project  bid  doesn’t  go  forward,  the  companies 
haven’t  spent  a  fortune  on  infrastructure  that 
won’t  get  used.  And  because  it’s  hosted  by 
Exostar,  an  independent,  third-party  provider, 
no  single  collaborator  is  seen  to  “own”  the 
workspace  or  the  data  therein,  establishing  a 
more  level  playing  field. 

ForumPass  is  yielding  impressive  reduc¬ 
tions  in  cycle  time  for  BAE.  In  the  past,  if  BAE 
wanted  to  alter,  say,  the  layout  of  a  control 
panel  on  an  aircraft  or  ship,  it  took  up  to  three 
months  to  calculate  the  final  cost  and  time 
impact  of  the  proposed  engineering  change. 
BAE  would  have  to  consult  its  tier-one  sup¬ 
pliers  who,  in  turn,  would  consult  with  tier- 
two  suppliers,  who  would  work  out  a  rough 
order  of  magnitude  price  and  send  it  back  up 
the  chain  of  command.  Then  the  process 
would  repeat  to  arrive  at  a  final  figure.  Now, 
change  requests  can  be  posted  to  all  supply 
chain  partners  simultaneously  in  ForumPass, 
and  they  can  see  one  another’s  comments  and 
thus  understand  clearly  the  issues  at  stake; 
comments  are  reconciled  at  online  meetings 
conducted  through  WebEx.  Because  users  are 
able  to  control  access  to  any  information  they 


“If  you  don’t 
work  out 
intellectual 
property 
ownership 
ahead  of  time, 
it  might 
strain  the 
collaboration 
or  constrict  the 
free  flow  of 
ideas  between 
companies.” 

-M.  ERIC  JOHNSON,  PROFESSOR  AND 
DIRECTOR  OF  THE  CENTER  FOR  DIGITAL 
STRATEGIES  AT  DARTMOUTH’S  TUCK 
SCHOOL  OF  BUSINESS 

put  into  the  shared  workspace,  suppliers  can 
save  time  by  using  ForumPass  to  reach  agree¬ 
ment  internally  on  a  price  before  releasing  it 
to  their  collaborators.  Now,  Nibbelke  says, 
it’s  possible  for  BAE  to  nail  down  final  costs 
within  1 0  days — roughly  one  tenth  of  the  time 
it  used  to  take. 

CONFRONT  SECURITY  ISSUES  HEAD-ON: 

The  growing  emphasis  on  security  further 
complicates  the  already  complex  task  of  inte¬ 
gration.  Although  security  issues  have  put  the 
kibosh  on  some  collaborative  projects  at  Visa, 
Thompson’s  team  was  able  to  successfully  col¬ 
laborate  with  business  partners  to  develop 
Visa’s  online  dispute  resolution  system,  Visa 
Resolve  Online.  The  system  allows  cardhold¬ 
ers  who  don’t  recognize  a  charge  on  their 
statement  to  call  the  banks  that  issue  their  cards 
and  get  immediate  explanations.  The  security 
challenge  was  enormous  because  the  system 
sits  behind  the  firewalls  of  financial  institutions 


that  offer  Visa  cards,  yet  accesses  transaction 
data  that  resides  within  Visa’s  systems. 
Although  business  and  IT  execs  at  the  banks 
and  at  Visa  were  eager  to  make  it  happen,  secu¬ 
rity  experts  on  both  sides  were  initially  con¬ 
cerned  that  this  type  of  system  could  open  a 
crack  in  security.  To  work  out  the  challenges, 
Visa  assembled  a  working  group  of  IT  and 
security  experts  from  Visa  and  15  or  so  mem¬ 
ber  financial  institutions.  “They  had  to  work 
it  through  and  iterate  it  until  they  found  a 
method  that  both  sides  could  live  with,”  says 
Thompson. 

Visa  then  published  a  document  outlining 
the  security  approach,  giving  other  member 
banks  a  chance  to  weigh  in  if  they  didn’t  think 
it  would  work  for  them.  The  fact  that  Visa 
Resolve  Online  is  in  use  in  the  market  today  is 
proof  that  even  the  gnarliest  of  security  issues 
can  be  tackled,  given  enough  patience,  a  direct 
get-them-in-the-room  approach  and  a  strong 
belief  that  the  effort  will  pay  off. 

If  companies  don’t  have  the  resources  to 
solve  security  issues  themselves,  a  third-party 
hosted  solution  might  be  the  answer.  BAE  and 
other  users  of  ForumPass  rely  on  Exostar’s 
access  control  and  built-in  encryption  to 
address  the  problem  of  distributing  the  vary¬ 
ing  levels  of  “need  to  know”  information 
among  supply  chain  partners.  Users  are  guar¬ 
anteed  that  no  unauthorized  person  can  look 
at  information  they  submit  to  ForumPass 
because  it’s  encrypted  as  soon  as  it  leaves  their 
desktop  and  is  stored  in  the  database  in 
encrypted  form. 

Collaboration  isn’t  an  easy  destination  to 
reach.  But  while  the  journey  might  be  ardu¬ 
ous,  the  payoff  once  you  arrive  can  be  well 
worth  the  effort.  HH 


Tell  CIO  Senior  Editor  Alice  Dragoon  how  you 
collaborate.  E-mail  her  at  adragoon@cio.com. 


Wicked  Good  Wikis 


One  of  the  newest  forms  of  collaboration  to  hit  the  busi¬ 
ness  world  is  the  wiki ,  server  software  that  al  lows  users 
to  create  and  edit  webpage  content.  Sounds  edgy,  but 
we’ll  walk  you  through  it.  Look  for  WIKIS:  AN  INTRO¬ 
DUCTION  in  the  online  version  of  this  article  or  at 
www.cio.com/printlinks 
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The  right  storage  solution 
doesn't  just  give  you  better 
storage  control.  It  helps  you  make 
better  business  decisions. 

Storage  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control. 
CA's  Intelligent  Storage  Management  solutions  can  put  you  in  control  of  costs, 
resources  and  data  availability  like  never  before.  They  provide  you  with  a 
comprehensive  real-time  view  of  your  system's  storage  capabilities,  while  also 
providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually 
use  existing  data.  As  always,  it's  also  vendor-  and  device-neutral,  so  you  can 
maximize  your  current  storage  resources,  saving  time  and  money.  With  more 
automated  software  that  can  make  its  own  decisions  about  storage 
management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca.com/driver. 
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The  Storage  Story 

BEHIND  EVERY  GREAT  BUSINESS/IT 
PRIORITY  ...  IS  A  SOLID  STORAGE  STRATEGY 

BY  TOM  FIELD 


IN  its  annual  “State  of  the  CIO”  survey,  CIO  magazine  recently  asked 
some  leading  executives  about  their  technology  priorities  for  2005. 
The  top  five  responses  were: 

•  Integrating/enhancing  systems  and  processes 
•  Ensuring  data  security  and  integrity 

•  Improving  external  customer  service/relationship  management 
•  Redesigning/rationalizing  the  IT  architecture 
•  Enabling/enhancing  e-commerce 
The  common  element  that  could  play  a  huge  role  in  each  of  those 
priorities:  Data  storage. 

Once  relegated  to  the  tactical  techies  on  the  lowest  rungs  of  the  IT  orga¬ 
nizational  ladder,  storage  projects  are  assuming 
strategic  importance  in  many  enterprises. 

They’ve  also  delivered  business  value  in  a  variety 
of  areas.  Information  security,  regulatory  compli¬ 
ance,  business  intelligence — all  rely  on  smart 
storage  strategies. 

Granted,  the  business-oriented  approach  to 
data  storage  goes  by  many  names — information 
lifecycle  management  and  storage  resource  man¬ 
agement,  to  name  just  a  few.  But  they  all  boil 
down  to  one  core  objective:  Making  sure  your 
company  always  has  access  to  the  right  information  at  the  right  time. 

In  this  issue  of  Strategic  Directions — the  last  of  2004 — you’ll  find  a  treas¬ 
ure  trove  of  advice  on  developing  strategies  for  preserving,  securing,  stor¬ 
ing,  and  accessing  your  company’s  critical  information  assets. 

About  Strategic  Directions:  This  ongoing  series  of  CIO  magazine  supple¬ 
ments,  produced  by  CXO  Media’s  Custom  Publishing  Group,  focuses  on 
the  key  business-critical  technologies  and  solutions.  Through  research, 
analysis,  case  studies  and  vendor  profiles,  we  aim  to  provide  you  with  exec¬ 
utive-level  primers  on  today’s  hottest  IT  topics. 

We’ll  be  back  in  2005  with  a  new  and  improved  Strategic  Directions — 
we’ll  even  have  a  new  name  for  the  publication — but  the  objectives  will 
remain  the  same.  And  we’ll  continue  to  seek  your  guidance.  Please  let  us 
know  which  technologies  you’d  like  us  to  explore  in  2005. 
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Tom  Field  is  director  of  content  development  for  CXO  Media’s  Custom  Publishing  Group. 
Please  send  your  thoughts  on  Strategic  Directions  to  Tom  at  tfield@cxo.com. 
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where  information  lives 


Fr:  a  wide  range  of  information  management  challenges 


To:  a  wide  range  of  software  to  overcome  them 


EMC  SOFTWARE  GIVES  YOU  MORE  OPTIONS,  MORE  CHOICES.  You  have  all  kinds  of  information 
management  challenges.  EMC  has  the  software  to  help  you  overcome  them.  Whether  you’re  dealing  with 
storage  management  or  content  management.  So  you  can  manage  growth,  protect  and  recover  information 
achieve  compliance  and  business  continuity,  and  keep  everything  running  smoothly.  And  EMC  software 
works  with  your  systems  and  software.  Now,  and  in  the  future.  To  learn  more,  visit  www.EMC.com/software. 
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OW  MUCH  DATA-STORAGE 
capacity  does  your  organi¬ 
zation  need  to  house  its 
information  assets?  How  much  will  it 


need  next  year?  The  year  after  that? 


“We’re  averaging  30  to  50  percent  growth  annually,”  says 
Hugh  Hale,  director  of  technical  services  at  Blue  Cross  and 
Blue  Shield  of  Tennessee  (BCBST).  It  took  the  Chatta¬ 
nooga-based  provider  of  health  care  insurance  and  services 
from  1945  until  1997  to  build  up  one  terabyte  of  informa¬ 
tion.  But,  Hale  says,  between  1997  and  2004,  the  company’s 


REAL-WORLD  PAYOFF:  A  SINGLE 
NETWORKED  STORAGE  ENVIRONMENT 

By  consolidating  its  data  storage  into  a  single  networked 
environment  and  deploying  a  McData  SAN  solution, 
Blue  Cross  and  Blue  Shield  of  Tennessee  has  seen  its 
investment  paid  back  in  three  months  and  expects  first- 
year  cost  savings  of  nearly  $600,000.  The  SAN  has: 

•  Cut  storage  spending  by  60% 

•  Lowered  storage  maintenance  costs  by  70% 

•  Boosted  storage  utilization  by  40% 

•  Slashed  data  network-related  downtime  exposure 
by  50% 


stored  data  skyrocketed  to  120  terabytes. 

BCBST  isn’t  alone  in  its  ever-increasing  demand  for 
storage.  Industry  figures  indicate  that,  at  virtually  every 
organization  of  every  size,  overall  storage  capacity  is  dou¬ 
bling  every  12  to  18  months,  says  Ken  Steinhardt,  director 
of  technology  analysis  at  Hopkinton,  Mass. -based  EMC 
Corp.,  which  specializes  in  storage  management  solutions 
and  services.  Meanwhile,  most  IT  budgets  have  stayed 
nearly  flat,  forcing  CIOs  to  improve  IT  staff  productivity 
without  increasing  headcount. 

In  addition,  “companies  need  to  be  able  to  track  their 
information  and  storage  assets  over  time,  identify  which 
departments  or  applications  they  belong  to,  and  understand 
how  their  utilization  has  changed  over  time,”  Steinhardt 
says.  “For  many  IT  organizations,  compiling  this  informa¬ 
tion  is  a  manually  intensive  process  involving  scripts,  com¬ 
mand-line  interfaces  and  spreadsheets  to  collect,  correlate 
and  summarize  asset  information.” 

The  challenge:  To  develop  and  execute  a  centralized  stor¬ 
age  strategy  that  encompasses  connectivity,  availability,  reli¬ 
ability,  backup  and  continuity,  scalability,  utilization, 
security  and  cost,  while  simultaneously  coping  with  the 
operational  tradeoffs  inherent  in  product  offerings  and 
legacy  environments. 

“This  really  involves  getting  buy-in  from  all  the  different 
areas  that  implement  storage  and  reminding  them  that  this 
is  an  enterprisewide  solution,”  says  Hale.  “The  more  central¬ 
ized  your  environment,  the  easier  it  is  to  manage  and  the 
fewer  people  you  need.  For  instance,  we  manage  120  ter¬ 
abytes  of  information  with  two  full-time  employees;  the 
industry  standard  is  about  one  FTE  [full-time  equivalent] 
for  every  6  to  10  terabytes.” 
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Q 


What  is  the  biggest  storage-related 
challenge  your  company  faces? 


Percentage  of  respondents  who  answered: 

Managing  growth  and  meeting  capacity  needs  30% 


Integration  and  consolidation  of  assets  22% 


Managing  storage  assets  18% 


Choosing  the  right  products/justifying  expenditures  10% 


Reliability/availability  9% 


Security  4% 

m 

Other  3% 


Source:  Top  Ten  Pain  Points  Survey  Results  Report,  prepared  by  the  Storage  Networking  Industry  Association 
End  User  Council,  May  2004 


One  possible  solution:  Mapping 
strategic  dynamics  to  operational 
options.  Start  by  considering  several 
important  questions: 

•  What  data  needs  to  be  highly  avail¬ 
able  so  it  can  be  easily  accessed  to 
meet  your  business  needs? 

•  What  kind  of  connectivity  and  relia¬ 
bility  will  this  demand? 

•  What  kind  of  security  and 
backup/restore  capability  is 
necessary? 

•  What  about  meeting  compliance 
requirements? 

•  How  much  room  do  your  business 
functions  need  to  grow? 

The  answers  to  these  questions  will  determine  your  data¬ 
storage  requirements  and  drive  your  quest  for  the  best  avail¬ 
able  solutions. 

“By  aligning  the  storage  characteristics  with  the  business’s 
specific  needs,  CIOs  can  maximize  the  value  of  their  infor¬ 
mation  at  the  lowest  overall  cost,”  says  Steinhardt. 

Hale  suggests  starting  from  scratch.  “Take  a  blank  sheet  of 
paper  and  design  the  SAN  [storage 
area  network]  and  the  management 
tools  you  need  up  front  and  then 
let  the  solutions  fit  your  design,”  he 
says.  “And  make  certain  there’s  a 
corporate  strategy  in  place.  Ours  is 
very  simple:  Centralize  everything. 

I  want  one  tool  to  manage  all  the 
environments.  I  want  the  look  from 
the  console  to  be  server-  and  oper¬ 
ating  system-independent.  It’s  sim¬ 
ply  more  productive  and 
cost-effective.” 


From  the  trenches: 

Functionality  over  technology 

“You  need  to  understand  what  you  want  before  you  go  into 
the  analysis  phase,”  Hale  advises.  “If  you  just  go  out  looking 
for  the  best  SAN,  you  might  end  up  with  great  technology, 
but  not  the  functionality  you  need.  You  need  to  begin  with  a 
list  of  your  requirements.” 

He  knows  the  importance  of  that  step  firsthand. 
“We  had  a  situation  where  network  services  wanted 
one  SAN  vendor  and  our  UNIX  folks  wanted 
another.  But  our  strategy  says  we  don’t  want  two 
different  SANs.  So  I  got  the  all  storage-support  folks 
together  and  said,  ‘You  all  have  to  get  on  the  same 
page  and  you’re  not  leaving  the  room  until  you  do.’” 

Ultimately,  the  decision  hinged  on  a  simple 
question:  “Which  of  the  two  solutions  could  han¬ 
dle  all  three  of  our  environments — the  main¬ 
frame,  UNIX  and  Windows?”  Hale  says.  “Only 
one  of  them  could,  so  that  immediately  elimi¬ 
nated  the  other.”  SD 


Ken  Steinhardt 


"By  aligning  the  storage  characteristics  with  the 
business's  specific  needs,  CIOs  can  maximize  the  value  of 
their  information  at  the  lowest  overall  cost." 

Ken  Steinhardt,  director  of  technology  analysis,  EMC  Corp. 
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i  9  where  the  payoffs  are 

Coping  With  Complexity 

ENTERPRISE  STORAGE  MANAGEMENT 


Anders  Lofgren,  vice  president  of  product 
management  for  the  BrightStor®  line  of 
solutions  from  Islandia,  N.Y. -based 
Computer  Associates  International  Inc., 
has  a  pretty  simple  definition  for  effective 
storage  management:  “It  means  protecting  the  data  for  all 
it’s  worth — but  not  more  than  it’s  worth.” 

In  a  world  where  nearly  incomprehensible  amounts  of 
data  need  to  be  stored  and  protected  using  convoluted  infra¬ 
structures,  it’s  often  hard  to  keep  that  balance  in  mind.  It’s 
harder  still  to  create  an  infrastructure  that  can  deliver  a 
seamlessly  integrated  environment — of  which  data  storage  is 
a  key  part — that’s  simple  for  end  users  to  navigate,  easy  to 
manage  and  grow,  and  hard  to  bring  down. 

Truth  is,  the  big  prize  remains  on  the  horizon.  But  some 
essential  elements — such  as  enterprise  storage  management 
solutions — are  within  reach. 


REAL-WORLD  PAYOFF:  BOOSTING 
BACKUP  SUCCESS  RATES 

To  meet  a  companywide  challenge  to  simplify  and 
control  costs,  Unilever’s  IT  organization  needed  to 
streamline  the  global  consumer-products  firm’s 
backup  and  data  restoration  systems  and  measure 
performance  against  precise  metrics.  Using 
BackupReport  from  Bocada  Inc.,  Unilever  signifi¬ 
cantly  increased  backup  success  rates,  hitting  serv¬ 
ice-level  performance  goals  of  99  percent  across 
Europe.  And  thanks  to  BackupReport,  the  company 
consistently  provides  a  business  view  of  its  data- 
protection  services  to  internal  customers  through¬ 
out  the  enterprise. 


What’s  the  problem? 

It’s  about  the  data.  Generally,  classification  processes  are  too 
manual,  too  redundant,  too  separate  from  asset  management 
systems.  Digital  rights  aren’t  sufficiently  monitored.  Versioning 
is  a  nightmare.  Storage  management  systems  can’t,  by  them¬ 
selves,  automatically  determine  what’s  needed  to  back  up, 
replicate,  and  archive  all  the  parts  of  shared  information  files. 

And  without  an  overarching,  business-oriented  view  of 
enterprise  data,  it’s  too  easy  for  individual  users  to  move, 
replicate,  back  up,  restore,  reorganize  and  archive  data  with¬ 
out  considering  the  impact  on  the  business. 

“A  good  CIO  needs  to  recognize  that  many  of  today’s  IT 
processes  are  just  plain  broken  and  only  going  to  get  worse,” 
says  Steve  Duplessie,  founder  and  senior  analyst  at  the 
Enterprise  Strategy  Group,  a  Milford,  Mass. -based  research 
firm  focusing  on  storage  and  information  management. 
“Give  the  skilled  people  the  tools,  the  time  and  the  money 
to  fix  the  problems  before  they  crater  the  company.” 

What’s  needed? 

Ideally,  storage  management  should  be  top-down,  driven  by 
people,  processes  and  policies.  That’s  easier  said  than  done. 
“The  real  challenge  is  in  multiple  factions  in  an  organiza¬ 
tion  not  always  working  toward  the  same  goals,”  Duplessie 
says.  “The  storage  administrator  wants  one  set  of  core  tools; 
the  operations  manager  has  different  requirements.” 
Meanwhile,  management  typically  doesn’t  care  about  the 
details  of  the  storage  management  solution — but  does  care 
about  uptime  and  utilization. 

Duplessie  advises  deploying  solutions  that  improve  on 
legacy  environments,  rather  than  just  replacing  them.  “Pick 
management  tools  that  make  your  previous  dumb  decisions 
suddenly  look  smart,”  he  says.  “They  do  exist.” 

Aiding  this  approach  are  standards  that  abstract  the  stor¬ 
age  environment  to  create  a  common,  vendor-independent 
content  repository  and  infrastructure — in  other  words,  a 


8  STRATEGIC  DIRECTIONS 


ADVERTISING  SUPPLEMENT 


Implementing  Electronic  Vaulting 
Technology  Makes  Calpine  a  Winner  at 
2004  Technology  Managers  Forum 


STUDY 


Congratulations  to  Calpine  Corporation 
for  winning  the  2004  Technology 
Managers  Forum  Best  Practices  Award  in 
the  Business  Continuity  category.  A  leading  North 
American  power  company  operating  more  than  90 
plants,  Calpine's  decision  to 


piancs,  caipine  s  decision  to  a  up  processes,  aero  re  eieci 
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technology  has  helped  it  to 
achieve  optimal  data  protection  as  part  of  a  compre¬ 
hensive  business  continuity  plan. 

ELIMINATE  THE  RISKS 

By  implementing  online  (Internet-based)  data  back¬ 
up  and  retrieval  and  offsite  storage  using  electronic 
vaulting  technology,  Calpine  has  eliminated  many  of 
the  risks  associated  with  a  traditional  backup  and 
recovery  strategy.  The  company  now  has  the  security 
of  automated,  reliable,  consistent  backup  and  recov¬ 
ery  processes.  Storing  data  offline  and  offsite  secures 
business-critical  data  out  of  reach  of  hostile  threats. 

Calpine's  embrace  of  vaulting  technology  also 
means  competitive  advantage  and  increased  busi¬ 
ness  resilience  thanks  to: 

•  Enhanced  business  continuity  through  its  up-to- 
the-minute  recovery  point  and  fast  recovery  time. 
Thousands  of  data  points  critical  to  plant  operations 
are  captured  every  4-5  seconds  and  available  for 


quick  restoration,  if  necessary. 

•  Lower  overhead  costs.  Calpine  determined  that 
electronic  vaulting  provides  a  200  percent  ROI  in  the 
first  year  and  a  500  percent  ROI  over  three  years. 

•  Improved  productivity  and  reliable,  consistent  back¬ 
up  processes.  Before  electronic 

s 

remote  sites  had  non-IT  staff 
members  performing  backup  and  tape-management 
activities,  resulting  in  backup  inconsistency  and  vari¬ 
able  reliability.  With  electronic  vaulting,  one  qualified 
person  monitors  and  backs  up  all  remote  plant  sites. 

Calpine's  outsourced  solution  best  practices 
include: 

•  Data  backed  up  continuously  and  automatically 
over  the  Internet  in  encrypted  form  to  an  off-site 
disk,  monitored  24x7x365. 

•  Backup  data  stored  on  disk  for  90  days,  on  tape  for 
7-years. 

•  Quick  data-recovery  time  and  an  up-to-the- 
minute  data  recovery  point— over  the  Internet. 

Calpine's  vendor  for  electronic  vaulting  services  is 
Iron  Mountain. 

For  more  information  on  what  Iron  Mountain's 
solutions  can  do  for  you,  visit 
www.ironmountain.com/downtime. 


common  file  system  for  all  enterprise  storage  elements. 

That  way,  products  from  a  variety  of  vendors  can  interoper¬ 
ate  without  being  dependent  on  a  parade  of  individually 
developed  application  programming  interfaces  (APIs). 

Storage  standards  at  last 

Fortunately,  the  first  version  of  the  Storage  Management 
Initiative  Specification  (SMI-S),  embraced  by  most  storage 
vendors,  supports  such  efforts. 

By  providing  common  information  models  for  managed 
storage  devices  and  creating  a  common  protocol  for  manag¬ 
ing  them,  SMI-S  aims  to  eliminate  the  need  for  vendor-spe¬ 
cific  management  protocols  and  application  protocol 
interfaces — and  for  the  costly  development  efforts  they 
entail.  Based  on  the  Web  Based  Enterprise  Management 
(WBEM)  architecture  and  the  Common  Information 


Model  (CIM),  SMI-S’s  evolution  is  being  guided  by  the 
Storage  Networking  Industry  Association,  a  San  Francisco- 
based  trade  association. 

SMI-S  Version  1.0,  released  earlier  this  year,  defines  a  model 
for  discovering  and  managing  host  bus  adapters  (HBAs), 
switches  and  arrays.  As  vendors  adopt  the  open,  extensible 
SMI-S  standard,  organizations  will  be  able  to  reduce  storage 
operations  and  management  costs,  more  quickly  implement 
changes  to  storage  infrastructure  and  extend  the  life  of  their 
storage  investments  while  avoiding  vendor  lock-in. 

Managing  the  data  lifecycle 

“Organizations  seeking  to  lower  storage  costs,  increase 
data  productivity  and  integrity,  simplify  storage  adminis¬ 
tration  and/or  create  accountability  for  data  should  con¬ 
sider  information  lifecycle  management  [ILM],”says 
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Q 


What  are  your  biggest  storage- 
management  challenges? 


Percentage  of  respondents  who  answered  .  .  . 

Managing  complex  storage  infrastructures  21% 


Manageable  and  reliable  backup  and  recovery  solutions  14% 


Centralizing  storage  infrastructure  management  13% 


Lack  of  robust  SRM  or  SAN  management  tools  10% 


Improving  resource  utilization  8% 


IT  budget  constraints  8% 


IT  management  places  low  priority  on  storage  infrastructure 
improvement  8% 


Interoperability  5% 

■ 

Lack  of  internal  standards  or  adoption  of  best  practices  and  policies  4% 

■ 

Other  3% 

Source:  Top  Ten  Pain  Points  Survey  Results  Report,  prepared  by  the  Storage  Networking  Industry  Association  End 
User  Council,  May  2004 


Gabriel  Broner,  senior  vice  president  of  Silicon  Graphics 
Inc.  ILM  involves  aligning  the  value  of  information  with 
the  cost  of  its  storage.  Effective  ILM  is  accomplished  by 
managing  data  from  cradle  to  grave,  moving  it  to  the  most 
cost-effective  storage  environment  depending  on  how  it’s 
being  used  in  the  business  at  any  given  time.  Since  90  per¬ 
cent  of  data  stored  on  disk  is  rarely  accessed  after  90  days, 


according  to  the  Enterprise  Storage  Forum, 
a  division  of  New  York  City-based 
JupiterMedia  Corp.,  moving  it  to  less  costly 
storage  media  at  the  right  time  will  be  well 
worth  the  effort  for  many  companies. 

“The  core  benefits  of  ILM  are  achievable 
today,”  Broner  says.  “Once  the  largely  manual 
process  of  classifying  data  is  complete,  ILM 
solutions  can  automate  the  management  of 
each  type  of  data  over  its  useful  life.” 

Such  automation  helps  eliminate  threats  to 
data  integrity  and  accountability  and  helps 
reduce  the  management  burdens  of  moving 
data  manually.  Moreover,  Broner  says,  automa¬ 
tion  provides  higher  productivity  than  alterna¬ 
tive  approaches. 

“To  be  successful,  an  ILM  strategy  must  be 
business-centric,  tying  closely  to  key  business 
processes,  applications  and  initiatives,” 
explains  Ken  Steinhardt,  director  of  technol¬ 
ogy  analysis  at  Hopkinton,  Mass. -based  EMC 
Corp.  “At  the  same  time,  it  must  provide  an 
integrated  view  of  all  information  assets, 
both — structured  and  unstructured.” 

SRM:  the  Holy  Grail? 

The  goal  of  storage  resource  management 
(SRM)  is  straightforward:  to  optimize  the 
management  and  utilization  of  existing  stor¬ 
age  and  backup  resources  to  improve  avail¬ 
ability  and  reliability  while  lowering  costs.  To 
work  effectively,  an  SRM  initiative  must  address  capacity  plan¬ 
ning,  discovery,  configuration,  monitoring,  provisioning,  per¬ 
formance  and  reporting  of  storage/backup  devices,  and  the 
underlying  infrastructure. 

“SRM  capabilities  provide  valuable  insight  into  data  and  stor¬ 
age  assets  across  the  IT  network,”  says  Lofgren.  “SRM  provides  a 
bird’s-eye  view  of  the  complete  storage  landscape,  including  the 


KEY  SRM  FEATURES 

Essential  to  a  robust  storage  resource  management  (SRM) 
solution  is  the  ability  to  plan,  provision,  monitor,  report, 
manage  devices  and  automate — all  while  working  with  a 
variety  of  vendors.  While  IT  environments  differ  from 
organization  to  organization,  most  will  benefit  from  SRM 
software  that  can: 

•  Identify  and  map  the  relationship  between  physical  and 
logical  devices,  including  servers,  storage  area  networks 
and  storage 


•  Graphically  monitor  the  environment  from  end 
to  end 

•  Manage  multiple  assets  and  processes  from  a 
centralized  dashboard 

•  Link  to  management  software  already  in-house 

•  Analyze  events  to  provide  intelligence  useful  for  under¬ 
standing  performance  issues,  asset  utilization,  provi¬ 
sioning  and  other  functions 

•  Report  on  how  storage  assets  are  utilized  by  application 
and  other  constructs  (such  as  departments) 

Source:  The  Role  of  SRM  in  Managing  the  Information  Lifecycle,  report  by  Mike  Karp, 

senior  analyst,  Enterprise  Management  Associates  Inc. 
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distributed  and  mainframe  sides  of  the  IT  environment” 
by  finding,  visualizing,  monitoring  and  reporting  on  both 
the  physical  and  logical  elements  in  a  storage  network,  and 
by  changing  those  elements  as  needed. 

“The  use  of  SRM  tools,  coupled  with  a  sound  informa¬ 
tion  lifecycle  management  [ILM]  strategy,  can  help  CIOs 
better  control  overall  capital  and  operational  expenditures 
for  the  enterprise  storage  infrastructure,”  Steinhardt  says. 
“They  help  IT  get  command  and  control  over  storage  envi¬ 
ronments  via  a  single  interface,  providing  timely  and  accu¬ 
rate  information  about  the  health,  performance  and 
utilization  of  storage  assets  at  any  given  time.” 

Storage  management  best  practices 

Following  are  four  tried-and-true  practices  for  effective 
storage  management,  along  with  the  likely  challenges  that 
must  be  overcome  to  effectively  implement  each: 


•  Consolidation:  Centralize  data  management  to  reduce 
the  need  for  redundancy,  replication  and  duplication. 
Challenge:  Developing  TCO  metrics  and  effective  service- 
level  agreements. 

•  Standardization:  Centralize  storage  purchase-approval 
processes.  Challenge:  Figuring  out  how  to  prevent  and 
penalize  “maverick”  spending. 

•  Modification  of  data  center  operations:  Centralize  activ¬ 
ities  such  as  data  backups,  archival  procedures,  and 
administrative  automation.  Challenge:  Creating  IT 
processes  and  service-level  agreements  that  meet  busi¬ 
ness  requirements. 

•  Use  of  integrated  management  tools:  Provide  adminis¬ 
trators  with  tools  that  help  them  monitor  utilization  and 
reliability,  decide  when  to  archive,  and  manage  accessibil¬ 
ity  and  security.  Challenge:  Deciding  which  tools  are  most 
likely  to  meet  both  current  and  future  needs.  SD 


Increase  Data  Protection  Service  Quality, 
Slash  Costs  and  Prove  Service  Delivery 


STUDY 


BackupReport®  from  Bocada®  collects, 
organizes,  stores  and  presents  a  unified, 
enterprise-wide  view  of  data-protection 
performance.  Relying  on  patented,  agentless  data- 
collection  technology,  BackupReport  deploys  rapidly, 
regardless  of  network  topology,  plat¬ 
form  or  physical  location  of  backup 
assets.  BackupReport  helps  IT 
departments  meet  the  business 
demands  of  their  customers  by  presenting  critical 
performance  metrics— data  protection,  system  uti¬ 
lization,  chargeback  and  audit  services— organized 
by  business  objectives. 


BOCADA 


BULLETPROOF  BACKUP  OPERATIONS, 

MEET  SLAs 

Corio  Inc.,  for  example,  is  using  BackupReport  to 
help  protect  the  data  of  its  customers.  Corio® 
delivers  best-of-breed  enterprise  applications  to 
some  of  the  largest  companies  in  the  world. 
BackupReport  provides  vendor-neutral,  third- 
party  validation  of  backup  success  and  allows 
Corio  to  allocate  data  protection  costs  to  cus¬ 
tomers.  BackupReport  has  helped  Corio  bullet¬ 
proof  its  backup  operations,  establish  and  track 
SLA  performance  and  allocate  costs  while  improv¬ 
ing  services. 


INCREASE  BACKUP  SUCCESS  RATES 
WORLDWIDE 

Another  BackupReport  user,  Virgin  Atlantic  Airways'  IT 
team,  backs  up  roughly  five  terabytes  of  critical  data 
every  week  using  diverse  systems  and  backup  products 
spread  among  offices  throughout  the 
world.  With  BackupReport,  the  team 
boosted  backup  success  rates  from  about 
60%  to  over  85%.  Server  utilization  has 
improved,  as  has  backup  scheduling,  and  the  team  mem¬ 
ber  who  used  to  spend  all  his  time  monitoring  backup 
activity  now  spends  his  time  on  strategic  planning. 

BackupReport  is  trusted  by  more  than  135  enter¬ 
prise  customers  worldwide,  including  leading  brand 
names  such  as  Agilent,  Commerzbank,  Genentech, 
Hershey's,  Microsoft,  Honeywell,  Orange,  Siemens, 
Royal  Bank  of  Scotland,  SBC,  Sprint,  Unilever,  Valero 
Energy  and  Xerox. 

Founded  in  1999,  Bocada  pioneered  development  of 
software  that  validates  data  protection  system  per¬ 
formance  against  business  goals.  Bocada's  flagship 
product,  BackupReport,  provides  objective  insight  on 
service  level  delivery  and  performance,  helping  IT 
organizations  increase  data  protection  service  quality, 
slash  costs  and  prove  service  delivery. 

For  more  information,  visit  www.bocada.com. 
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Storage  as  Utility 


ORRELATING  STORAGE  USAGE  to  busi- 
B  \  ness  operations  allows  intelligent 

decisions  and  policies  to  be  put  place 
y  for  effective  storage  management,” 
says  Anders  Lofgren,  vice  president 
of  product  management  for  Computer  Associates’ 
BrightStor®  solutions. 

A  storage  utility  model,  Lofgren  notes,  enables  the  cost  of 
storage  to  be  managed  in  conjunction  with  business  objec¬ 
tives.  That  capability,  in  turn,  helps  organizations  control 
the  growth  of  their  storage  environments,  ensuring,  as 
Lofgren  puts  it,  “that  the  right  data  is  on  the  right  asset, 
with  the  right  protection/security,  at  the  right  time  to  sup¬ 
port  the  needs  of  the  business.” 

Treating  storage  as  a  utility  can  help  simplify  enterprise 
storage  environments.  Popular  approaches  include  storage 
consolidation/virtualization  and  managed  storage  services. 

The  fabric  of  storage  virtualization 

Storage  virtualization  hides  infrastructure  complexities 
behind  a  layer  of  logical  abstraction  so,  regardless  of  the 
actual  details,  all  physical  storage  appears  as  a  single  central¬ 
ized  repository. 


The  results: 

•  Centralized  management.  One  tool  can  handle  virtual¬ 
ization  and  data  services  with  a  fiber-channel  fabric,  elim¬ 
inating  the  repetitive  administrative  tasks  and  the  labor 
costs  associated  with  them. 

•Improved  disk  utilization.  Consolidating stovepiped 
storage  environments — typically  an  assortment  of  direct- 
attached,  network-attached  and  storage  area  networks — 
into  virtual  pools  enables  these  resources  to  be  used  more 
efficiently  because  they  can  be  shared  with  any  network 
server. 

•Tiered  Storage.  Administrators  can  mix  and  match  stor¬ 
age  arrays  rather  than  being  forced  to  use  the  same  costly 
enterprise-class  machines  to  remotely  replicate  critical  data 
for  high-availability  and  disaster  recovery  functionality. 

•  Consolidated  data  services.  Migrating  the  data  services 
that  organizations  have  built  into  workflows  and  disaster- 
recovery  plans,  such  as  replication  and  snapshots,  means 
they  can  perform  across  heterogeneous  storage  arrays  and 
be  more  easily  managed. 

Approaches  to  storage  virtualization  include  solutions  that 
are  software-based,  switching-based,  and  appliance-based. 

“The  discussion  of  virtualization  is  too  often  focused  on 
the  management-tools  level,”  says  Gabriel  Broner,  senior 
vice  president  and  general  manager  of  the  storage  and  soft¬ 
ware  group  at  Silicon  Graphics  Inc.  in  Mountain  View, 


REAL-WORLD  PAYOFF: 

VIRTUALIZING  TAPE  BACKUP 

Since  its  inception  in  1994,  Blue  Hill  Data  Services 
Inc.,  a  provider  of  data-center  mainframe  outsourc¬ 
ing  and  direct  marketing  tools  and  services,  has  never 
lost  a  customer.  But  the  company  was  spending  too 
much  on  tape  media  and  labor.  Part  of  the  solution 
was  IBM’s  3590  Automated  Tape  Library  (ATL).  The 
rest  came  from  Computer  Associates’  BrightStor  CA- 
Vtape  Virtual  Tape  System,  which  has  increased  the 
amount  of  data  on  the  IBM  ATL  by  147  percent. 
That’s  resulted  in  a  reduction  in  the  number  of  tapes 
used— -from  100,000  to  25,000-and  the  number  of 
drives  used — from  88  to  44.  Labor  costs  have 
decreased  as  well. 


Calif.  “Virtualization  implemented  in  the  infrastructure 
itself  is  much  more  effective.” 

Broner  sees  consolidation,  data  lifecycle  management  and 
data  protection  solutions  working  together,  virtualizing 
capacity,  capability  and  heterogeneity  “to  grow  as  the  busi¬ 
ness  grows,  with  investment  protection  all  the  way  down  to 
the  device  and  application  level.” 

The  virtues  of  electronic  vaulting 

Outsourcing  storage-management  tasks  can  cut  labor  costs 
by  25  to  40  percent  as  compared  with  doing  the  job  inter¬ 
nally,  according  to  Data  Storage  Today,  an  online  industry 
news  publication.  Turning  to  managed  storage  services  for 
backup  and  recovery  capabilities  can  be  especially  effective 
for  small  and  midsize  businesses,  whose  resources  may  be 
challenged  by  the  need  for  more  frequent  backups  of  bur¬ 
geoning  amounts  of  data,  with  minimal  time  to  do  it. 
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Delivering  Sustainable  Cost  and  Productivity 
Benefits  for  Data-Intensive  Enterprises 


STUDY 


SGI  is  the  world's  leader  in  high-per¬ 
formance  computing,  visualization 
and  storage.  As  the  only  full  line  of 
storage  solutions  designed  specifically  for  data- 
intensive  environments,  SGI  InfiniteStorage 
Solutions  go  beyond  the  TCO  benefits  of  consoli¬ 
dation,  contributing  to  your  top  line 
with  productivity  increases  that  deliver 
real  ROI.  The  entire  product  line  is 
designed  to  integrate  seamlessly  and 
to  scale  "infinitely"  so  you  can  change 
capacity,  performance,  connectivity  or 
even  storage  architecture  to  meet  your 
requirements  today  and  tomorrow  without  losing 
your  investment. 

For  example,  Medtronic,  a  world  leader  in  the 
design  and  manufacture  of  medical  technology,  has 
depended  on  SGI  technology  for  the  past  12  years  for 
analysis,  simulation  and  product  development  for 
many  of  the  cardiac  products. 

Medtronic's  problems  began  as  the  amount 
of  its  data  grew  and  Medtronic  engineers  found 
themselves  spending  more  and  more  time 
waiting  for  data  to  copy  over  already  overloaded 
networks.  The  result?  Engineers'  productivity 
decreased. 


FROM  A  GRAVEL  ROAD  TO  A  SIX-LANE  FREEWAY 

To  solve  these  problems,  Medtronic  implemented  a  Fibre 
Channel  SAN  with  SGI  InfiniteStorage  Shared 
Filesystem  CXFS.  CXFS  gives  the  SGI  compute  servers 
and  the  workstations  used  by  Medtronic  engineers 
instant,  concurrent  access  to  all  data  stored  on  the  SAN 
so  engineers  no  longer  waste  valuable  time 
copying  data,  and  without  superfluous  copies, 
there  is  less  data  to  store,  manage  and  back  up. 

According  to  Tim  Abraham,  graphics  resource 
manager  for  CRM  therapy  delivery,  "With  the 
addition  of  the  SAN  and  CXFS,  the  return  on 
investment  for  our  existing  equipment  has  gone 
way  up.  Overall  disk  and  server  utilization  has  increased 
substantially  and  engineers  no  longer  waste  time  copy¬ 
ing  data.  For  Medtronic,  the  transition  from  NFS  over  a 
LAN  to  CXFS  over  a  SAN  has  been  like  going  from  a  gravel 
road  to  a  six-lane  freeway." 

With  robust  and  combinable  solutions  for  intelli¬ 
gent  consolidation,  data  lifecycle  management  and 
data  protection,  SGI  InfiniteStorage  is  delivering 
sustainable  cost  and  productivity  benefits  in  the 
unique  and  demanding  environments  of  data- 
intensive  enterprises. 

For  more  information  visit  www.sgi.com/storage. 


In  many  organizations,  electronic  vaulting  is  replacing 
manual  tape  backups.  Providers  of  electronic  vaulting  serv¬ 
ices  automatically  back  up  server  data  based  on  user  crite¬ 
ria,  encrypting  it  and  sending  it  via  the  Internet  or 
dedicated  communications  lines  to  secure  offsite  locations. 
Software  from  the  provider  enables  users  to  recover  data 
either  onsite  or  remotely,  effectively  bundling  backup  and 
disaster  recovery  services. 

Online  backup  service  checklist 

Considering  an  online  backup  service?  Look  for  solutions 
with  these  features: 

\/  A  field-proven,  scalable  storage  architecture  that  the 
provider  continually  upgrades.  Inspect  the  facilities  to  make 
sure  the  provider’s  infrastructure  has  what  you  need  in 
terms  of  capacity,  availability,  management,  security,  vendor 
solutions,  and  other  issues. 

\/  Fast,  reliable  recovery  via  an  easy-to-use  self-service 


interface  that  delivers  granular,  disk-based  restores.  Such 
capability  minimizes  the  need  for  manual  intervention — 
and  the  potential  for  human  error. 

^  24/7  provider  monitoring,  including  validation  of  back¬ 
ups,  problem  alerts,  and  technical  help. 

\/  Vaulting  that’s  securely  offsite  and  offline  but  that  also 
remains  online  for  a  specified  period  of  time  so  that  it’s 
available  for  quick  restores. 

^  Expertise  and  service  offerings  tailored  to  your  organi¬ 
zation’s  applications  and  configurations.  For  example,  you 
might  look  for  regulation-compliant  e-mail  archiving  and 
server-and  PC-oriented  backups. 

/  Visibility  into  service  performance  and  trends  via  self- 
service  interfaces  or  portals. 

^  Predictable,  measurable  costs  for  forecasting  future  needs. 
^  A  service  level  agreement  that  ensures  quality  of  service, 
delineates  availability,  capacity  and  recovery  performance, 
and  spells  out  change  processes  and  accountability.  SD 
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New  Kinds  of 
Networks 


Until  fairly  recently,  organizations  want¬ 
ing  to  move  beyond  direct-attached  stor¬ 
age  (DAS)  had  two  choices: 

•  Network-attached  storage  (NAS),  gener¬ 
ally  in  the  form  of  a  dedicated  file  server 
that  supports  standard  network  file  system  protocols  and 
uses  the  Internet  Protocol  (IP),  or: 

•  Storage  area  networks  (SANs),  which  use  a  dedicated  net¬ 
work  to  provide  access  to  consolidated  block-level  storage, 
connecting  servers  and  storage  arrays  with  fiber-channel 
(FC)  technology. 

Now  these  once-competitive  approaches  are  starting  to 
work  together.  With  NAS,  disparate  servers  and  PCs  can 


REAL-WORLD  PAYOFF:  REPLACING 
DAS  WITH  SAN 

Blue  Rhino  Corp.,  a  provider  of  branded  propane 
grill  cylinder  exchange  services,  was  approaching  the 
limits  of  its  direct-attached  storage  (DAS)  infra¬ 
structure.  Then  the  company  implemented  EMC 
Corp.’s  CLARiiON  CX400-based  storage  area  net¬ 
work  (supported  by  EMC  SnapView  backup  soft¬ 
ware,  Navisphere  storage  management  and  Access 
Logix  data  protection  and  shared  storage  access). The 
result:  Blue  Rhino  has  saved  more  than  $150,000  in 
annual  expenses  related  to  administration,  monitor¬ 
ing  and  productivity.  A  $125,000  reduction  in  server 
and  tape  drive  costs  also  is  expected.  In  addition,  the 
company  reduced  its  data  and  applications  adminis¬ 
tration  time  by  75  percent. 


simultaneously  access  and  share  files,  storage  can  be  consol¬ 
idated  at  the  file-system  level,  and  features  such  as  fail-over 
redundancy,  backup  integration,  remote  mirroring  and 
point-in-time  copying  are  supported.  For  those  reasons, 
NAS  is  often  used  in  environments  where  file  sharing  and 
collaboration  are  important. 

SANs,  on  the  other  hand,  offer  dedicated  storage  provi¬ 
sioning  and  tunable  performance  that’s  fast  and  secure 
and  includes  such  advanced  capabilities  as  centralized 
backup,  data  replication,  remote  mirroring  and  redun¬ 
dant  storage  connectivityall  without  burdening  opera¬ 
tional  network  facilities.  SAN  management  tools,  such  as 
those  from  EMC  Corp.  and  Computer  Associates,  supply 
the  physical  layer  of  storage  management  by  identifying, 
configuring,  allocating  and  deploying  storage  assets  in 
heterogeneous  environments. 

Such  features — and  their  increasing  speed  (new  fiber- 
channel  switches  and  host  bus  adapters  double  their  speed 
to  4  gigabits  per  second,  and  10  gigabits  per  second  is  on  the 
horizon) — make  SANs  very  attractive  to  organizations  with 
extremely  large  storage  volumes. 

No  longer  NAS  versus  SAN 

Each  approach  has  advantages.  Because  NAS  hangs  off 
operational  (typically  Ethernet-based)  local  area  net¬ 
works  (LANs),  disparate  servers  and  PCs  can  simultane¬ 
ously  access  and  share  files.  Storage  can  also  be 
consolidated  at  the  file  system  level,  and  features  such  as 
fail-over  redundancy,  backup  integration,  remote  mirror¬ 
ing,  and  point-in-time  copying  are  supported.  So  NAS  is 
often  used  in  environments  where  file-sharing  and  collab¬ 
oration  are  important. 

However,  using  existing  Ethernet  components  for  data 
storage  has  serious  drawbacks.  Among  the  concerns: 
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EMC  ControlCenter  SRM  Software  Delivers 
Time  and  Cost  Savings  to  CompUSA 


STUDY 


IT  departments  today  are  faced  with  a 
multi-pronged  dilemma  when  it  comes 
to  storage.  Long  term,  they're  contend¬ 
ing  with  how  to  manage  information  over  the 
course  of  its  lifecycle  while  simplifying  overall 
administration,  improving  utilization  and  lower¬ 
ing  management  costs.  And  at  the  most  basic 
level,  they  need  to  simply  better  manage  the 
increasing  size  and  complexity  of  their  storage 
networks.  Until  recently,  many  have  been  taking 
on  SAN  management  by  white¬ 
boarding  or  otherwise  manually 
tracking  storage  capacity. 

Storage  resource  management 
(SRM)  software,  such  as  EMC 
ControlCenter,  is  one  of  the  key 
solutions  that  is  freeing  IT  departments  from  the 
time-consuming  task  of  manually  tracking  storage 
capacity,  while  delivering  the  added  benefit  of  sim¬ 
plifying  overall  administration.  ControlCenter  is 
also  a  key  component  in  information  lifecycle  man¬ 
agement  (ILM),  enabling  customers  to  more  effec¬ 
tively  monitor,  report,  plan  and  provision  storage 
across  tiered,  multi-vendor  environments. 

CompUSA,  one  of  the  nation's  leading  retailers 
and  resellers  of  technology  products  and  services, 
was  faced  with  the  time-consuming,  personnel¬ 
intensive  task  of  managing  SANs  via  command- 


EMC 


line  scripting.  Consequently,  the  company  evaluat¬ 
ed  numerous  SRM  solutions  and  decided  to  imple¬ 
ment  ControlCenter  to  design,  plan  and  provision 
the  infrastructure,  and  configure  and  optimize 
their  storage  devices 

FROM  DAYS  TO  MINUTES 

"ControlCenter  has  had  a  major  impact  on  our  oper¬ 
ations,"  says  Sid  Walton,  director  of  IT  technical 
services  at  CompUSA.  "It  has  enabled  us  to  increase 
application  uptime  and  rapidly  imple- 
2  rnent  changes  as  our  business  evolves. 
With  ControlCenter,  we've  dramatically 
reduced  the  hours  we  used  to  spend 
where  information  lives  scripting  and  reporting,  and  we're 

much  better  equipped  to  troubleshoot, 
isolate  and  resolve  performance  issues." 

ControlCenter's  comprehensive  monitoring  and 
reporting  capabilities  also  enabled  CompUSA  to 
assess  growth,  usage  and  performance,  which  is 
essential  for  proactively  identifying  performance 
issues  and  reallocating  storage  before  the  problem 
impacts  a  business-critical  application.  As  a  result, 
CompUSA  reduced  utilization  reporting  time  from 
three  days  to  minutes. 

For  more  information  on  SRM  and  ControlCenter, 
visit  www.emc.com/storagemanagement. 


•  Storage  networks  should  not  be  exposed  to  the  security 
risks  to  which  corporate  LANs  are  subject. 

•  LANs,  which  can  tolerate  dropped  packets  and  collisions, 
are  not  optimized  for  data  storage  tasks,  which  have  little 
tolerance  for  latency  and  cannot  afford  to  lose  data  due  to 
timeouts. 

But  traditional  fiber  channel-based  SANs  are  complex, 
expensive  and  face  distance  restrictions.  So  now  vendors  are 
developing  SANs  that  use  the  Internet  rather  than  fiber- 
channel  technology.  The  key  protocol  is  iSCSI,  which 
enables  SANs  to  be  constructed  with  proven  Ethernet  tech¬ 
nology.  iSCSI  transports  block-level  storage  across  IP  net¬ 
work  infrastructures,  allowing  Internet-based  data  access 
that  effectively  eliminates  the  physical  boundaries  of  the 
storage  network  and  significantly  reduces  the  cost  of  adding 
new  servers.  iSCSI  can  be  integrated  with  fiber-channel 


SANs  using  a  router.  By  linking  existing  fiber-channel  SAN 
environments,  notably  for  disaster  recovery  and  long-dis¬ 
tance  replication,  organizations  can  overcome  SAN  distance 
limitations  and  weave  intelligence  into  the  storage  fabric. 

The  approach  also  offers  substantial  savings  compared  to 
using  proprietary  protocols  over  fiber-channel  links.  For 
instance,  the  IP  storage  SAN  installed  by  one  Colorado 
county  government  cost  45  percent  less  than  alternative 
solutions.  In  addition,  Solucient  LLC  of  Evanston,  Ill., 
which  provides  business-intelligence  solutions  to  the  health 
care  industry,  installed  an  iSCSI  SAN  for  one-third  the  cost 
of  a  fiber-channel  SAN. 

“Moving  forward,  iSCSI — block-storage  networking 
over  Ethernet  networkshas  the  single  greatest  potential  to 
impact  storage  infrastructure  management,”  says  Steve 

CONTINUED  ON  PAGE  1  7 
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Intelligent  Storage  Management  Solutions 
for  On-Demand  Requirements 


PROFILE 


Computer  Associates  International, 
Inc.  (NYSE:CA),  the  world's  largest 
management  software  company, 
delivers  software  and  services  across  operations, 
security,  storage,  life  cycle  and  service  management 
to  optimize  the  performance,  reliability  and  efficien¬ 
cy  of  enterprise  IT  environments.  Under  its 
BrightStor®  brand,  CA  delivers  Intelligent  Storage 
Management  solutions  that  enable  businesses  to 
lower  management  costs,  achieve  greater  span  of 
control  of  their  storage  environment,  and  increase 
storage  utilization  in  order 
to  meet  the  on-demand 
requirements  of  ever-chang-  V 
ing  business  challenges. 

New  Intelligent  Storage  Management  solutions 
from  CA  address  the  business  problems  facing  com¬ 
panies  today  with  compliance,  business  continuity 
and  disaster  recovery,  security  concerns,  escalating 
costs  against  shrinking  budgets,  and  continuous 
data  growth. 

With  the  introduction  of  BrightStor®  ll.l,  CA  pro¬ 
vides  intelligent  storage  management  by  integrating 
and  automating  enterprise  storage  processes  and  by 
implementing  a  single  management  view  across 
those  processes.  It  prioritizes  data  protection  based 
on  business  value,  while  increasing  performance  via 
multi -streaming  and  multiplexing  capabilities.  By 
supporting  key  applications,  databases  and  sys¬ 


tems— Oracle,  Microsoft  SQL  Server,  Microsoft 
Exchange,  SAP  R/3  and  many  others— BrightStor®  11.1 
helps  ensure  business  continuity,  fast  access  to  data 
and  compliance  with  data  retention  regulations. 

MANAGE  AND  PROTECT  ACROSS  MULTIPLE 
PLATFORMS 

With  BrightStor®  ll.l  solutions,  organizations  can 
better  leverage  their  investments  in  storage  infra¬ 
structure  and  devices  by  managing  and  protecting 
greater  volumes  of  data  across  multiple  platforms— 

including  Windows,  UNIX, 

~  ,  *  .  *  Linux,  NetWare,  and  main- 

Computer  Associates®  frame  z/os_in  a  common 

manner.  Managers  can  make 
informed  decisions  about  resource  allocation  based 
on  the  business  value  of  data  assets  and  specific 
operational  requirements,  enabling  them  to  prioritize 
investments  in  high-value  data.  IT  organizations  can 
also  reclaim  unused  capacity,  increase  the  efficiency 
of  backup  and  restore  processes,  and  maximize  staff 
productivity. 

CA  offers  its  BrightStor®  Intelligent  Storage 
Management  solutions  under  Storage  Management, 
Data  Availability,  Information  Life  Cycle  Management 
and  Mainframe  Storage. 

For  additional  information, 
visit  www.ca.com/brightstor 


REAL-WORLD  PAYOFF: 

SAN  SUPPORT  FOR  E-BUSINESS 

Hong  Kong-based  brokerage  CLSA  Ltd.,  a  subsidiary  of  France’s  Credit  Agricole/Credit  Lyonnais  Bank,  needed  a  con¬ 
tinuously  available  IT  infrastructure  and  a  storage  area  network  capable  of  automatic  recovery.  The  firm  chose  an 
EMC  Corp.  solution  consisting  of  two  EMC  Symmetrix  storage  systems,  EMC  Connectrix  directors  and  software 
including  EMC  TimeFinder,  EMC  SRDF,  EMC  PowerPath,  ResourcePak  for  NT,  EMC  Replication  Manager  and  EMC 
ControlCenter  storage  management  software. 

As  a  result,  CLSA  was  able  to  launch  its  electronic  transaction  business.  Now,  50  percent  of  CLSA  transactions  are 
conducted  electronically,  up  from  5  percent.  The  infrastructure  also  enables  CLSA  to  create  testing  environments  for 
new  services  in  less  than  30  minutes — something  that  previously  took  15  to  16  hours.  And  during  the  outbreak  of 
Severe  Acute  Respiratory  Syndrome  (SARS)  last  year,  the  brokerage  barely  skipped  a  beat — its  new  infrastructure 
enabled  more  than  half  of  its  staff  to  work  from  home. 
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Q 


What  are  the  top  reasons  you  have 
implemented  or  are  considering  a 
storage  network? 


Percentage  of  respondents  who  answered  .  .  . 

Consolidate  existing  capacity  26% 


Manage  growth  18% 


Improve  storage  management  capability  18% 


Improve  backup  and  recovery  10% 


Improve  disaster  recovery  and  business  continuance  5% 


Provide  more  efficient  provisioning  5% 


I 


Implement  virtualization  1% 


Other  1% 


I 


Source:  Top  Ten  Pain  Points  Survey  Results  Report,  prepared  by  the  Storage  Networking  Industry  Association  End 
User  Council,  May  2004 


Duplessie,  founder  and  senior  analyst 
at  the  Enterprise  Strategy  Group,  a 
Milford,  Mass. -based  research  firm. 

“All  the  benefits  you  got  from  your 
fiber-channel  SAN — increased  avail¬ 
ability,  performance,  utilization, 
etc. — are  absolute  now,  so  the  mission 
is  to  increase  the  ‘touch,’  the  amount 
of  servers  sharing  in  these  benefits. 

With  iSCSI,  instead  of  SANs  with  50 
servers,  we  can  have  SANs  with  5,000 
servers.  It’s  not  an  either-or  scenario, 
it’s  a  combination,  with  fiber  channel 
at  the  core  of  your  big  stuff  for  a  long, 
long  time.” 

What  about  shared  data? 

When  diverse  computer  systems  and 
platforms  exchange  data,  traditional 
SANs  can’t  help,  so  users  have  been 
stuck  with  slow  access  methods  (NFS, 

CIFS,  FTP).  This  significantly  degrades 
performance  in  intensive  computing 
environments,  such  as  those  demand¬ 
ing  advanced  visualization  capabilities, 
where  user  workflow  depends  on 
timely  access  to  and  sharing  of  large 
files  that  typically  create  struggles  for 
conventional  network  file  systems. 

The  solution?  A  SAN  file  system,  such  as  CXFS  from 
Silicon  Graphics  Inc.,  in  which  one  system  on  the  SAN  acts 
as  a  metadata  server,  controlling  file  permissions  and 
mediating  shared  access — and  allowing  all  SAN  systems 
simultaneous  high-speed  access  to  the  same  file  systems 
and  files.  There’s  no  file  server  through  which  all  data  must 
travel,  and  no  file  server  bottlenecks  to  slow  down  per¬ 


formance.  A  single  system  can  have  multiple  connections, 
enabling  data  rates  of  multiple  gigabytes  per  second.  Once 
the  metadata  server  grants  access,  systems  can  read  and 
write  data  directly  over  the  SAN  to  and  from  disks.  Add  in 
fail-over  redundancy  and  RAID  storage,  and  the  result  is 
very  high  availability  and  a  path  to  needed  data  even  when 
some  systems  have  failed.  SD 
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Adaptec  Sales 
(800)  442-7274, 

mention  code  CIO 

www.adaptec.com 

Adaptec  delivers  reliable  storage  solutions  that  drive  new  levels  of  effi¬ 
ciency,  performance  and  ease-of-managementin  direct-attached  storage 
(DAS)  and  networked  storage  solutions.  The  Adaptec  solution  offering 
includes  a  range  of  complete  storage  solutions  tailored  to  meet  specific 

application  and  budget  requirements. 

Intransa,  Inc.  (headquarters) 

2870  Zanker  Road.  Suite  200 
San  Jose,  CA  95134 
Main:  408.678.8600 
Fax:  408.678.8800 
sales@intransa.com  408-678-8746 

www.intransa.com 

The  Intransa  IP  SAN  Storage  System,  designed  specifically  for  SMB, 
Departments  and  Enterprises,  delivers  the  functionality  and  scalability  of  an 
enterprise-call  SAN  solution  at  much  lower  cost.  It  is  easy  to  install  and  use 
while  providing  excellent  performance  and  reliability-  Intransa  is  enabling 
businesses  to  improve  overall  productivity  and  business  continuity. 


intransa 
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RELIABLE  BACKUP  AND 


Solutions 


u 


IN  SPITE  OF  ITS  MATURITY,  backup  is  Still 
inherently  unreliable  and  costly.  Failure 
rates  exceed  40  percent  in  most  large 
enterprises,”  says  Drake  Pruitt,  vice  presi¬ 
dent  of  marketing  at  Bocada  Inc.,  a  stor¬ 
age  software  vendor  in  Bellevue,  Wash. 

Meanwhile,  60  percent  of  small  and  midsize  companies 
participating  in  a  study  by  the  Enterprise  Strategy  Group,  a 
Milford,  Mass.-based  research  firm,  said  backups  take  too 
long,  and  49  percent  said  recoveries  take  too  long.  “To  han¬ 
dle  the  exponential  growth  in  data,  companies  overspend 
on  redundant  attempts,  capacity  provisioning  and  in  some 
cases,  staffing,”  Pruitt  says. 


Oh,  the  pain 

No  wonder.  Successful  data  backup  matters  now  more  than 
ever.  Surveys  by  Coughlin  Associates  Inc.,  a  storage-consult¬ 
ing  firm  in  Atascadero,  Calif.,  point  to  the  rising  cost  of 
downtime.  In  one  study,  26  percent  of  respondents  pegged 
their  organization’s  downtime  costs  at  $10,000  to  $100,000 
per  hour.  Another  15  percent  estimated  costs  at  $100,000  to 


REAL-WORLD  PAYOFF: 
CONSOLIDATING  BACKUP 

Southeastern  Freight  Lines,  a  transportation  com¬ 
pany  based  in  Lexington,  S.C.,  faced  significant  IT 
costs  and  storage  management  challenges  in  sepa¬ 
rately  backing  up  two  critical  computing  environ¬ 
ments.  The  company  implemented  EMC  Corp.’s 
Legato  NetWorker  to  consolidate  the  backup  of  both 
systems,  which  contained  logistical,  order  tracking, 
and  business  information  and  applications.  The 
result:  Reduction  of  the  company’s  full  backup  win¬ 
dow  from  12  hours  to  three,  improved  productivity, 
decreased  maintenance  costs  and  increased  utiliza¬ 
tion  of  existing  hardware.  The  change  also  eliminated 
the  need  for  duplicate  backup  equipment  and  associ¬ 
ated  licensing  fees. 


$1  million  per  hour,  and  nearly  10  percent  said  downtime 
costs  them  more  than  $1  million  per  hour. 

“The  issue,”  says  Pruitt,  “is  not  how  to  control  complexity, 
but  rather  how  to  ensure  delivery  of  quality  services  to  support 
the  business  against  the  backdrop  of  growing  complexity.  To 
do  this,  CIOs  need  tools  and  analytic  support  to  measure, 
gauge  and  inform  their  staff  of  areas  of  service  shortfalls.” 

Tools  that  automate  the  collection  of  backup  perform¬ 
ance  data  allow  IT  staff  to  identify,  remedy  and  prevent 
chronic  sources  of  error,  he  notes.  They  also  optimize 
workflow,  infrastructure  and  operations  that  ensure  align¬ 
ment  with  business  needs. 

“The  net  results,”  Pruitt  says,  “are  higher  success  rates, 
reduced  capital  consumption  and  compliance  with  internal 
and  external  policies.” 


Put  out  those  fires 

Pulling  your  staff  out  of  the  constant  data  backup/restore 
mode  requires  taking  a  series  of  steps: 

1  Assess  the  state  of  your  data  backup  service  delivery. 

Conduct  an  enterprise-wide  audit  of  current  backup 
performance.  Most  needed  information  can  be  gleaned 
from  analysis  of  existing  backup  logs — up-to-date  through¬ 
puts  and  loads,  consolidated  reports  about  current  and  past 
performance,  data  availability  and  incidents. 

2  Find  out  what  your  business  really  needs. 

Talk  with  internal  customers  to  define  their 
backup/restore  expectations,  establish  benchmarks  (such  as 
restore  time  and  compliance  requirements)  that  define  suc¬ 
cess,  and  translate  these  into  service-level  agreements. 

3  Identify  where  you  must  improve. 

Begin  by  comparing  current  and  desired  quality  of 
service  levels.  Then  figure  out  how  you  can  reach  the 
desired  levels  at  the  lowest  possible  cost. 

4  Fix  the  problems. 

This  means  troubleshooting  chronic  sources  of  backup 
error,  clearing  obvious  bottlenecks,  and  backing  up  “orphaned” 
systems  and  files.  It  can  also  mean  acquiring  the  new  systems 
and  software  needed  to  achieve  service  levels,  or  modifying 
service  levels  that  clearly  cannot  be  achieved.  Finally,  formal¬ 
ize  your  reporting  and  communications  efforts.  SD 


18  STRATEGIC  DIRECTIONS 


TO  HAVE  YOUR  BACKUPS  PROTECTED, 
CALL  FOR  ONE  OF  OUR  VEHICLES. 


With  Iron  Mountain,  your  backup  data  can  be  transported  by  road  or  by  wire.  Our  Electronic  Vaulting  Service 
is  another  dependable  way  to  have  your  data  protected  off-site.  And  without  the  need  for  an  IT  person  at  your 
branch  or  remote  locations. 

Electronic  Vaulting  also  means  your  files  are  backed  up  continuously,  further  reducing  the  risk  of  data  loss  if 
a  system  has  to  be  restored.  It  also  standardizes  your  backup  process  across  all  of  your  locations. 

For  a  copy  of  "Calculating  the  Cost  of  Downtime”,  visit  www.ironmountain.com/downtime  or  call  1-800-899-IRON. 

^  Iron  Mountain 
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SILICON  GRAPHICS 


The  Source  of  Innovation  and  Discovery™ 


rv  w  t  \  n  u 


i  n  «I  I*  r  I'  )'  !'  1  !  !'  T  J'J 


in  lUuu'nio’Tiuvrr- 


Now  there’s  no  such  thing  as  too  much  information.  Huge 
data  sets  that  were  once  the  problem  are  now  quickly 
becoming  part  of  the  solution.  SGI  I nf initeStorage  delivers 
the  complete  line  of  solutions  for  intelligent  consolidation 
data  lifecycle  management  and  data  protection,  which  inte 
grate  seamlessly  and  scale  infinitely  delivering  exceptional 
performance.  In  fact,  SGI  holds  the  world  record  for  data 
backup  and  restore.  So  no  matter  the  size  of  the  data,  you 
can  be  certain  the  solution  is  SGI.  sgi.com/lnfiniteStorage 


©  2004  Silicon  Graphics,  SGI  and  the  SGI  logo  are  registered  trademarks  and  The  Source  of  Innovation  and  Discovery  is  a  trademark  of  Silicon  Graphics,  Inc.  in  the  United  States  and/or  other  countries  worldwide. 
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“CSO  Perspectives  provides 
security  executives  with  a 
well  planned  event  that 
assembles  visionaries, 
leaders  and  technical 
experts  delivering  thought 
and  information  that  will 
drive  the  landscape  of 
security  in  the  market.” 


Michael  Assante 
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Balancing  the  Art  &  Science  of  Security 


Today's  security  executives  are  required  to 
perform  difficult  and  constant  balancing  acts 
between  the  art  and  science  of  security,  con¬ 
tinuously  weighed  against  the  needs  of  the 
business.  Getting  the  "science”  part  of  the 
equation  right  is  the  easier  part.  The  tech¬ 
nologies  are  known  entities,  and  better  ones 
continue  to  evolve.  There  are  quantitative 
measurements  around  such  issues  as  intru¬ 
sion  detection,  forensics  and  regulatory 
compliance,  along  with  more  mature 
attempts  to  quantify  the  ROI  of  security. 

It’s  the  “art”  of  security  that’s  the  harder 
part— the  art  of  diplomacy,  of  persuasion, 
of  getting  into  and  understanding  other 
mindsets.  It’s  everything  from  establishing 


security  procedures  everyone  will  actually 
follow.  It’s  fostering  positive  relations  with 
senior  executives  and  the  board  of  directors. 
It’s  getting  the  staff  to  think  like  a  hacker  or 
terrorist  to  get  ahead  of  potential  threats. 

We’ll  examine  this  complex  balancing  act  by 
looking  at  what  the  top  practitioners  are 
thinking  and  doing,  and  by  listening  to  what 
leading  security  and  privacy  experts  think 
will  affect  the  landscape  of  the  future. 

For  more  information 

call  800.366.0246  or  visit 
www.csoonline.com/conferences 
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EMC  CAN  HELP  YOU  OPTIMIZE  ORACLE  ACROSS  ITS  ENTIRE  LIFECYCLE.  Our  servic 

and  hardware  help  you  get  more  from  your  Oracle  database  and  applications.  Developed  jointly 
Oracle,  our  solutions  give  you  the  power  to  improve  availability,  reliability,  and  flexibility  while  lowering 
TCO.  You  gain  a  common  information  infrastructure,  proven  to  work  in  the  most  demanding  situations  — 
including  migrations,  upgrades,  backups,  and  peak  workloads.  Visit  www.EMC.com/solutions  to  learn  more 
and  sign  up  for  a  live  demo.  Or  call  1-866-464-7381. 

Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 
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What  should  you  change  and  what  should  you 
keep  in  your  organization?  The  business  model 
can  guide  you,  helping  managers  uncover 
vulnerabilities  and  shore  up  strengths. 


It’c 

become  commonplace  to  say  that  globalization  has  changed  business, 
T  I  but  the  tectonic  shifts  run  deeper  than  most  businesses  understand. 

These  changes  are  permanent  rather  than  cyclical;  the  fundamentals  of  how  a  business 
makes  money  have  been  altered  by  worldwide  supply  chains,  instant  communications 
and  a  surplus  of  readily  available  capital.  More  troubling  to  managers  is  the  speed  with 
which  these  factors  can  render  products  and  processes  obsolete,  even  endangering  a 

business’s  survival.  Larry  Bossidy,  the  retired  chairman 
and  CEO  of  Honeywell  International,  and  Ram  Charan, 
acclaimed  business  guru  and  author,  have  followed  up 
their  2002  bestseller,  Execution:  The  Discipline  of  Get¬ 
ting  Things  Done.  Their  new  book,  Confronting  Reality: 
Doing  What  Matters  to  Get  Things  Right,  is  a  how-to 
guide  for  confronting  change— how  to  spot  vulnerabilities 
in  your  organization  and  scan  for  competitive  threats, 
how  to  diagnose  what  needs  to  be  changed  and  what  to 
leave  alone,  and  how  to  prepare  your  organization  to 


Reader  ROI 

►  How  global  changes  can 
quickly  render  business 
strategies  obsolete 

►  A  model  for  assessing  an 
organization's  strengths 
and  weaknesses 

►  How  to  decide  which 
improvements  are  right 
for  your  company 


From  the  book 

Confronting  Reality: 
Doing  What  Matters  to 
Get  Things  Right  by 

Larry  Bossidy  and 
Ram  Charan. 

Copyright  2004  by 
Larry  Bossidy  and 
Ram  Charan.  Pub¬ 
lished  by  Crown  Busi¬ 
ness,  a  member  of  the 
Crown  Publishing 
Group,  a  division  of 
Random  House. 
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change  rapidly.  The  authors’  basic  management  tool  is  the  business  model.  Though  certainly 
not  a  new  concept,  this  version  of  the  business  model  is  broken  down  into  three  components 
that  leaders  can  act  on:  assessing  the  external  environment  that  the  organization  inhabits, 
setting  financial  targets  for  profitability  and  gauging  the  adequacy  of  the  company’s  internal 
processes  and  structures.  Finally,  say  Bossidy  and  Charan,  good  leaders  must  regularly 
examine  their  business  model  and  create  new  iterations  as  needed.  This  excerpt  shows  the 
business  model  in  action. 


As  a  practical  matter,  virtually  every 
business  is  now  a  player  on  the 
global  stage.  But  it’s  still  hard  for 
most  people  to  see  the  specific 
ways  global  forces  affect  their  businesses.  Peo¬ 
ple  tend  to  look  at  them  in  piecemeal  or  linear 
fashion,  failing  to  see  emerging  patterns.  What 
they  see  often  looks  bewildering:  a  chaos  of 
volatile  exchange  rates,  competitive  dynam¬ 
ics  that  are  hard  to  define  and  understand,  and 
uncertainty  about  a  host  of  other  complexi¬ 
ties.  The  result  is  that  more  and  more  business 
leaders  are  getting  blindsided,  with  a  speed 
that  was  almost  unthinkable  in  the  past.... 


The  Linux  operating  system  [that  Linus 
Torvalds]  designed  as  a  college  student  in  1991 
and  posted  online  interested  only  geeks  at  first. 
But  over  the  years,  the  free  open-source  soft¬ 
ware  attracted  more  and  more  followers  and 
developers.  Now  it’s  beginning  to  look  like  a 
genuine  competitor  to  Microsoft’s  Windows.... 

The  new  rule  is  that  almost  any  business 
activity  is  ever  more  likely  to  have  a  world¬ 
wide  dimension.  A  new  competitor  can  come 
from  anywhere.  The  next  Linus  Torvalds — 
perhaps  the  one  who  could  make  life  hard  for 
your  own  business — may  even  now  be  devel¬ 
oping  his  or  her  plans  sitting  at  home  in  Ban¬ 
galore,  Shanghai  or  Prague.  It  doesn’t  matter 
if  this  person  is  operating  on  a  shoestring;  a 
good  idea  is  increasingly  likely  to  find  financial 
backers.  And  once  any  new  product  or  service 


hits  the  market,  it  can  reach  customers  any¬ 
where  on  the  planet  almost  overnight. 

The  other  side  of  the  coin,  of  course,  is  that 
the  new  global  game  offers  unparalleled  oppor¬ 
tunities  for  those  savvy  enough  to  find  them.  If 
you’re  the  first  to  see  a  market  opening  or  the 
implications  of  a  shift  in  regulatory  policies, 
you  could  be  the  new  competitor  who  blind- 
sides  a  complacent  player. 

What’s  the  reason  for  all  of  this  ?  And  will  it 
continue?  Understanding  how  the  world  busi¬ 
ness  environment  affects  you  starts  with  dis¬ 
tinguishing  between  cyclical  and  structural 
change.  Cyclical  changes  are  part  of  business 


life’s  normal  ups  and  downs,  and  any  compe¬ 
tent  executive  can  deal  with  them.  Structural 
changes  are  fundamental,  long-term  alter¬ 
ations  in  the  basics  of  making  money.  They  are 
usually  hard  to  differentiate  from  cyclical 
changes  in  their  early  stages,  which  is  when 
you  really  need  to  see  them.  By  the  time  they’re 
obvious,  your  odds  of  adjusting  well  to  them 
are  sharply  lower. 

Three  structural  changes  are  driving  today’s 
explosion  of  intensifying  worldwide  competi¬ 
tion:  One  is  the  increasing  integration  of  busi¬ 
ness  activity  across  borders,  accelerated  by  the 
Internet  with  its  instant  communications  and 
vast  repository  of  ideas  and  dialogues.  Its  most 
tangible  aspect  is  the  rapid  growth  of  supply 
chains  that  stretch  from  the  United  States  and 
Europe  to  all  parts  of  the  world — not  only  for 


goods,  but  now  for  services  as  well.  The  sec¬ 
ond  structural  change  is  worldwide  over¬ 
investment,  fueled  by  a  vast  credit  expansion 
and  immense  free  flow  of  risk  capital.  The  third 
is  a  global  buyers’  market  that  has  shifted 
power  from  the  owners  and  managers  of  cap¬ 
ital  to  consumers  and  giant  retailers.  There’s 
also  a  wild  card.  Around  the  world,  govern¬ 
ment  regulators  are  getting  more  aggressive, 
and  they  are  coming  at  different  issues,  in  dif¬ 
ferent  times  and  places,  without  coordination 
or  rationalization  of  their  policies.... 

The  business  model  brings  rationality  to  the 
issue  of  change.  It  is  the  guide  for  when  to 
change  and  when  not  to  change,  what  to 
change  and  what  not  to  change.  If  you  link  your 
assessment  of  the  external  environment  to  your 
financial  targets  and  your  internal  capabilities, 
you  will  have  a  much  clearer  picture  of  the  mag¬ 
nitude  of  change  required:  whether  it’s  a  change 
in  strategy,  a  change  in  operations  or  people,  or 
a  change  in  the  business  model  itself.... 

There  is  no  one-size-fits-all  plan  of  action. 
What’s  right  depends  on  the  particulars  of 
your  business  environment,  financial  targets 
and  internal  activities — in  short,  a  thorough 
assessment  through  the  lens  of  the  business 
model.  Not  every  business  model  needs  an 
overhaul.  Sometimes  a  company  is  simply 
underperforming  in  a  world  of  opportunity. 
That’s  when  leaders  have  to  think  hard  about 
how  performance  links  with  external  realities 
and  internal  activities,  and  be  judicious  in  the 
actions  they  recommend.  The  ability  to  zero  in 
on  precisely  the  parts  of  the  business  that  need 
attention  and  leave  the  rest  alone  is  just  as 
much  as  sign  of  great  leadership  as  is  rein¬ 
venting  the  business  model  when  radical 
action  is  needed.... 

The  Business 
Model  at  Cisco 
Systems 

Among  the  many  players  humbled  in  the 
stock  market  by  the  tech  meltdown,  Cisco 
stood  out  for  the  magnitude  of  its  fall  from 
grace.  At  its  zenith  in  2000,  the  maker  of 
routers  and  switchgear  briefly  had  the  largest 


The  next  Linus  Torvalds— the  one 
who  could  make  life  hard  for  your  own 
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market  capitalization  in  the  world:  At  more 
than  $531  billion,  it  was  greater  than  that  of 
GE,  which  had  six  times  Cisco’s  revenue.  By 
mid-200 1 ,  Cisco’s  stock  had  fallen  from  its  peak 
of  $82  to  around  $20,  eventually  bottoming  out 
at  around  $8  in  October  2002. 

Cisco’s  revenue  actually  increased  between 
2000  and  2001,  from  about  $18.9  billion  to 
$22.3  billion,  before  dropping  back  to  roughly 
$  1 9  billion  in  the  next  two  years.  But  the  finan¬ 
cial  markets  were  expecting  continued  blazing 
growth.  And  when  CEO  John  Chambers 
appeared  to  be  brushing  off  his  problems,  they 
weren’t  quick  to  forget  their  dashed  hopes,  and 
there  was  no  question  that  Chambers  had  a 
problem  on  his  hands.  The  evidence  was  clear¬ 
est  in  [the  external  environment,  which  is]  the 
first  component  of  the  business  model.  The  tele¬ 
com  industry,  which  accounted  for  much  of  his 
sales,  was  crippled  by  overcapacity.  Demand 
was  evaporating  as  the  telecoms  underwent 
structural  change,  and  Cisco’s  profits  were 
evaporating  with  it. 

The  bleak  prospects  might  have  been  enough 
to  panic  some  leaders  into  trying  to  reinvent 
their  business  models.  Indeed,  that’s  what 
investors  and  the  business  press  seemed  to  be 
expecting;  they  all  but  booed  him  when  he 
argued  that  Cisco  would  weather  what  he  called 
“a  hundred  year  storm.”  But  Chambers  had 
looked  carefully  at  his  model.  Though  he  rec¬ 


ognized  that  Cisco  was  hurt,  he  had  reason  to 
maintain  his  famous  optimism. 

The  model  had  long  been  admirable.  The 
linkages  between  the  external  environment,  the 
internal  activity — particularly  its  strategy — and 
the  financial  targets  had  made  the  company  a 
standout.  Its  highly  desirable  products  were 
aimed  at  market  segments  that  were  exploding 
with  growth,  and  while  they  were  competitively 
priced,  they  earned  attractive  margins.  Cisco 
kept  up  with  demand  through  a  strategy  that 
relied  heavily  on  subcontracting,  and  the  low 
capital  intensity  in  combination  with  reason¬ 
ably  good  margins  translated  into  lofty  returns 
and  huge  cash  generation.... 

Determiningthe 
Solution  forCisco 

What  exactly  had  changed  since  then?  In  his 
root  cause  analysis,  Chambers  reasoned  that 
the  telecom  business  wouldn’t  disappear  for¬ 
ever;  it  was  j  ust  getting  smaller.  There  was  noth¬ 
ing  ominous  on  the  regulatory  or  competitive 
fronts,  and  Cisco’s  technology  was  still  cutting- 
edge.  So  for  Cisco,  this  was  a  nasty  cyclical 
downturn,  nothing  more. 

The  financial  targets  were  obviously  in  trou¬ 
ble  at  the  moment:  Profits  were  plunging;  in 
2001,  the  company  lost  more  than  $1  billion. 
But  Cisco’s  cash  hoard  allowed  Chambers  to 


take  a  bold  and  savvy  $2.5  billion  inventory 
write-down  without  serious  damage.  As  he  con¬ 
tinued  to  revisit  the  targets,  he  saw  ways  to 
improve  margins  at  lower  revenue  levels,  and 
to  get  ready  for  higher  targets  when  the  econ¬ 
omy  came  back.  The  answer  lay  in  improving 
cost  performance  and  productivity. 

Turning  to  the  internal  activities  component, 
Chambers  cut  nearly  20,000  employees  and 
slashed  the  numbers  of  suppliers  and  resellers. 
He  rationalized  his  huge  proliferation  of  prod¬ 
ucts,  reducing  the  lines  from  50  to  40  and  axing 
hundreds  of  models  within  them.  Switches  and 
routers  were  redesigned  for  lower  cost,  using 
fewer  parts....  Cisco  had  acquired  hundreds  of 
companies  during  the  boom;  Chambers  reor¬ 
ganized  to  integrate  the  many  that  were  still  only 
half-digested.... 

Meantime  Chambers  was  looking  at  the 
strategy  element.  He  believed  he  could  leverage 
Cisco’s  business  model  in  new  market  segments, 
especially  those  where  other  well-established 
competitors  had  come  close  to  bankruptcy. 
Identifying  several  markets  and  segments  with 
high  potential,  he  not  only  attacked  markets  for 
routers  and  switches,  such  as  the  cable  industry, 
but  also  began  increasing  Cisco’s  offerings  to 
include  consumer  products.... 

By  2003,  still  using  its  original  business 
model,  the  company  was  making  headway  in 
six  new  product  areas  it  called  Advanced  Tech- 
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Understanding  how  the  world  business  environment 
affects  you  starts  with  distinguishing  between  cyclical  and 
structural  change.  Cyclical  changes  are  part  of  business’s 
normal  upsanadowns.  Structural  changes  are  long-term 
alterations  on  the  basics  of  making  money. 


nology  markets:  optical,  network  security,  IP 
telephony,  wireless  LAN,  storage  networking 
and  home  networking.  Each  of  these,  Cham¬ 
bers  has  said,  has  “the  potential  to  eventually 
create  a  $1  billion  revenue  opportunity  for 
Cisco.  ”  Regardless  of  how  well  or  poorly  Cisco 
capitalizes  on  them,  they’re  opportunities  that 
exist  only  because  Chambers  made  the  right 
decision  when  calamity  struck.  It’s  hard  to  know 
where  the  company  would  have  been  if  he  had 
misdiagnosed  the  change  as  structural  and 
turned  the  whole  business  model  upside  down 
instead  of  focusing  incisively  on  the  key  elements 
of  the  three  components  [of  the  business  model] . 
EXTERNAL  REALITIES:  Demand  plunged  as 
customers  cut  back  their  purchases  and  con¬ 
fronted  the  mounting  overcapacity  in  their 
industry.  But  Cisco’s  cutting-edge  products  were 
still  desirable. 

FINANCIAL  TARGETS:  Revenue  growth  stalled, 
margins  shrank,  and  cash  generation  slowed. 
INTERNAL  ACTIVITIES:  Cisco’s  operations  and 
organizational  processes  were  designed  for  high 


growth.  Products  proliferated,  and  controlling 
costs  was  not  a  high  priority. 

ITERATION:  When  he  read  the  market  down¬ 
turn,  Chambers  correctly  analyzed  it  for  Cisco, 
it  was  cyclical,  not  structural.  He  kept  his  finan¬ 
cial  targets  and  strategy  intact,  and  modeled 
ways  to  align  them  with  the  new  and  future 
marketplace  realities.  After  establishing  the 
likely  volume  of  sales,  he  searched  continually 
and  repeatedly  for  ways  to  lower  costs  and  get 
his  desired  margins.  In  subsequent  iterations, 
Chambers  saw  opportunities  to  get  into  new 
markets  and  segments  vacated  by  fallen  com¬ 
petitors;  with  plenty  of  cash,  he  moved  to 
exploit  these  opportunities. 

What’s  the  Right 
Initiative  for  Your 
Organization? 

In  this  new  [business]  environment,  with  its 
ever  intensifying  battles  for  razor-thin  advan¬ 


tages,  almost  any  edge  you  can  gain  looks 
attractive.  And  the  list  of  tools  and  method¬ 
ologies  an  organization  can  use  to  improve  is 
endless.  These  days  the  most  popular  initia¬ 
tives  are  moving  operations  to  low-cost 
regions,  streamlining  the  supply  chain  and  Six 
Sigma.  These  initiatives  are  being  widely 
adopted  because  they  aim  squarely  at  the  chal¬ 
lenges  so  many  companies  face:  reducing  cost, 
and  improving  productivity  and  quality. 

Other  initiatives  range  from  a  variety  of 
process  improvements  to  analytical  tools 
such  as  the  Balanced  Scorecard,  which  aug¬ 
ments  traditional  financial  measures  with  cri¬ 
teria  for  things  such  as  customer  satisfaction 
and  business  process  effectiveness.  Compa¬ 
nies  continue  to  devote  considerable  time  to 
integrating  information  technology  functions 
through. ..ERP  [systems]  and  the  acquisition 
of  facilitating  software. 

Keeping  in  mind  that  you’re  as  interested 
in  conditioning  your  organization  for  dealing 
with  change  as  you  are  in  achieving  specific 


You  ve  Picked  A 

Winner! 


CIO  magazine  is  again  the  proud  recipient 
of  the  prestigious  2004  Grand  Neal 
Award— two  years  in  a  row!— the  top  edito¬ 
rial  honor  granted  to  one  publication  from 
nearly  1,300  entries  across  all  categories 
and  circulation  sizes.  CIO  also  won  Neal 
Awards  for  “Best  Single  Issue”  and 
“Best  Article.” 


i 


Often  hailed  for  its  preeminence 
as  the  "Pulitzer  Prize  of  the  business 
press,”  the  Neal  Award  is  the 
business  publishing  industry’s 
annual  salute  to  individual  editors 
for  outstanding  editorial  excellence. 


*  SOURCE:  CIO  READER  PROFILE  STUDY, 
MR!.  SEPTEMBER  2003 


The  Neal  Award  judges  aren’t  the  only  ones 
who  prefer  CIO  magazine.  CIOs  choose  CIO 
as  the  one  publication  they  rely  on  most  for 
strategies  and  best  practices  for  managing 
information  technology.* 
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Book  Excerpt  |  Confronting  Reality 


A  lot  of  corporate  energy  is  expended  on  initiatives  and 
“improvements”  because  they’re  the  formula  dujour.... 
The  improvements  you  choose  must  be  guided  by  the 

priorities  in  your  business  model. 


improvements,  we  see  a  number  of  additional 
noteworthy  initiatives  coming  down  the  road. 

One  is  achieving  uniform  IT  [systems]  and 
software.  Far  too  much  money  is  being  lost  as 
companies  try  to  cobble  together  different 
systems.  Unifying  them  leads  to  enormous 
savings  and  productivity  improvements. 
You  might  think  this  is  strictly  an  IT  issue 
rather  than  a  driver  of  broad  cultural  adap¬ 
tation,  but  it  isn’t.  It  takes  enormous  coop¬ 
eration  across  the  business  for  people  to  give 
up  their  familiar  software  and  adapt  to  new 
systems.  The  same  is  true  for  adapting  to  out¬ 
sourced  computing  power  versus  owning 
your  own  machines— something  more  com¬ 
panies  are  doing  in  order  to  increase  flexibil¬ 
ity  and  lower  capital  needs. 

Another  is  keeping  talent  within  the 
organization.  Anything  you  can  do  to  create 
more  job  freedom  will  yield  real  gains  in 
morale  and  performance.  The  workplace 
keeps  getting  more  demanding  as  companies 


ratchet  up  productivity,  and  leaders  need  to 
give  more  time  and  attention  to  mitigating 
the  burdens.  For  example,  managers  need  to 
be  more  creative  in  helping  people  find  ways 
to  divide  work  between  office  and  home. 
This  is  particularly  important  for  those  with 
young  children.... 

What’s  important  is  to  pick  the  initiative 
that’s  right  for  your  business.  A  lot  of  corpo¬ 
rate  energy  is  expended  on  initiatives  and 
“improvements”  because  they’re  the  formula 
du  jour — the  latest  fad  or  buzz — concept. 
We’re  talking  not  just  about  the  obvious  mis¬ 
fires  (remember  quality  circles  and  zero 
defects?),  but  about  anything  that’s  suddenly 
popular  that  may  not  necessarily  be  a  top  pri¬ 
ority  given  your  circumstances  at  the  moment. 
“I  saw  a  company  with  a  great  supply  chain,  ” 
a  leader  will  say.  “Let’s  put  that  in.”  Or,  “We 
have  to  do  Six  Sigma  because  everybody  else 
is.”  Often  as  not,  the  organizational  energy 
and  resources  end  up  being  wasted.  When  the 


next  initiative  comes  along,  people  groan  and 
say,  “Here  we  go  again.” 

The  improvements  you  choose  must  be 
guided  by  the  priorities  in  your  business 
model.  The  critical  areas  are  the  operating 
strengths  and  weaknesses  that  affect  the  busi¬ 
ness’s  ability  to  generate  cash  earnings  over 
time — things  such  as  cost,  productivity,  prof¬ 
itable  revenue  growth,  differentiation,  speed 
and  quality.  For  example,  if  you  need  to  raise 
cash  flow,  look  to  things  such  as  improving 
inventory  turns  or  a  process  improvement  that 
speeds  the  collection  of  receivables. 

Whatever  the  choice,  always  be  sure  the 
initiative  is  something  your  people  can  han¬ 
dle.  Remember  that  you’re  not  only  aiming 
for  a  specific  improvement,  but  also  training 
the  organization  for  adaptation,  and  trying 
to  build  unity  and  alignment.  If  it  takes  an 
easy  or  uncomplicated  task  to  get  people 
ready,  suppress  your  impatience  and  make 
sure  you  lay  the  groundwork.  HE] 


We’re  inspired  by  the  human  side  of  data.  Keeping  bank  data  and  medical  information  secure  is  more 
than  just  keeping  1’s  and  0’s  safe.  What  you’re  really  protecting  is  a  child’s  college  tuition,  and  a  man’s 
key  to  better  living.  That’s  why  the  world’s  largest  banks  and  hospitals  use  Hitachi  storage  technologies 
to  protect  their  data,  and  their  customers’  futures.  From  the  smallest  Microdrive®  to  the  largest  SAN 
solution,  Data  Storage  from  Hitachi. 
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Letting  someone 
else  run  your 
applications  can 
pay  dividends— but 
only  under  the 
right  conditions 


Host  with  the  Most  i 

BY  MERIDITH  LEVINSON  j 

ONLINE  APPLICATIONS  |  In  spring  2002,  the  13-person  IT  department  at  Keller  Williams 
Realty  built  an  online  event  registration  system  so  that  real  estate  agents  could  sign  up  for  train¬ 
ing  and  seminars  offered  by  the  company.  The  system  cost  $1 80,000  to  create  (not  an  insignif¬ 
icant  sum  for  an  IT  department  with  a  budget  in  the  low  millions),  consumed  the  time  and  labor 
of  one-third  of  the  department  for  five  months,  and  has  cost  the  company  approximately 
$50,000  to  maintain  over  the  course  of  the  system’s  life. 

Today,  Keller  Williams  is  thinking  about  replacing  this  homegrown  registration  system  with 
one  developed  and  hosted  by  Cvent.  Jack  Miller,  Keller  Williams’  software  development  man- 

1 1 1  I 

ager,  says  that  despite  his  staff’s  skills,  the  hosted  system — at  least  in  initial  tests — is  far  better  than  g  I 

anything  he  and  his  colleagues  could  create.  Plus  the  trial  system  was  up  and  running  within  “ 
weeks.  Best  yet,  if  the  trials  pan  out,  the  Cvent  system  will  cost  a  fraction  of  what  it  cost  to  deploy  f 

and  maintain  the  old  system.  Keller  Williams  will  pay  only  a  small  transactional  fee  each  time  £ 
an  agent  registers  for  an  event.  (Miller  estimates  the  system  will  process  more  than  20,000  reg-  | 

istrations  per  year. )  5 

Aside  from  the  cost  advantages  and  quick  deployment  time,  Keller  Williams  may  also  switch 
to  Cvent’s  hosted  solution  because  of  the  vendor’s  expertise  in  dealing  with  event  registration.  ^ 
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BECAUSE  THE  FUTURE 
IS  MORE  EXCITING  THAN 

THE  PAST 


It's  your  choice.  Job  Description  1:  Maintain  legacy  communications  systems  based  on  outmoded  analog  technologies.  Must  be 
fully  adept  at  "potchkying"  together  solutions  that  appear  to  do  new  things.  Facility  with  answering  the  question,  "Why  can't  I?" a 
plus.  Job  Description  2:  Take  a  company-wide  communications  strategy  into  the  future.  Implement  IP-based  videoconferencing, 
global  work  teams  and  business-resilience  strategies.  Answer  the  question,  "How'd  you  do  that?"  with  aplomb.  To  learn  more 
about  Cisco  IP  Communications  solutions  or  to  find  a  service  provider  that  offers  these  managed  services  over  a  Cisco  Powered 
Network,  visit  cisco.com/domore.  COMMUNICATION.  THE  NEW  FASHIONED  WAY.  CISCO  IP  COMMUNICATIONS. 
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“We’re  a  real  estate  company,”  says  Miller. 
“We  don’t  know  anything  about  the  world  of 
events,”  he  says. 

Hosted  applications  work  well  for  Keller 
Williams  (which  is  also  getting  hosted  online 
collaboration  tools  for  each  of  its  360  real 
estate  offices  from  Intranets.com)  because  the 
realtor  does  not  have  the  IT  infrastructure, 
manpower  nor  budget  to  either  build  its  own 
applications  or  maintain  third-party  soft¬ 
ware.  But  hosted  software  isn’t  only  for  com¬ 
panies  with  small  IT  departments.  Many 
multibillion-dollar  organizations,  such  as 
Qantas  Airways  and  Unilever,  are  turning  to 
hosted  software  and  systems  for  the  same  cost 
savings  and  convenience — except  on  a  larger 
scale.  They,  too,  want  to  save  money,  deploy 
quickly  and  concentrate  their  IT  staffs  on  the 
most  strategic  projects  with  the  highest  busi¬ 
ness  value.  And  while  some  analysts  and  IT 
executives  argue  that  the  cost  advantages 
of  the  hosted  model  will  often  be  a  wash 


after  three  to  five  years,  companies  such  as 
Unilever  are  still  attracted  to  the  idea  of  a 
low  up-front  investment  and  a  predictable 
expense  stream. 

At  a  time  when  companies  are  still  playing  it 
safe,  CIOs  are  addressing  users’  IT  demands  by 
finding  service  providers  that  will  host,  main¬ 
tain,  and  upgrade  applications  and  systems  for 
them.  The  arrangement  usually  involves  a 
monthly  or  transactional  fee,  and  is  commonly 
known  as  “hosting”  or  “software  as  a  service” 
(or,  in  the  dotcom  era,  “application  service 
providers” — a  name  with  such  bad  overtones 
that  it  rarely  gets  used  these  days).  In  a  survey 
published  by  Summit  Strategies  in  May  2004, 
3 1  percent  of  respondents  with  more  than 


1,000  employees  said  they  currently  use  soft¬ 
ware  as  a  service,  with  an  additional  1 1  percent 
saying  they  were  in  the  process  of  evaluating 
software-as-a-service  offerings. 

While  hosting  can  be  a  very  attractive 
option,  it’s  not  right  for  every  company,  nor 
do  all  applications  lend  themselves  to  delivery 
over  the  Internet.  The  following  examples 
illustrate  where  hosted  applications  work, 
where  they  don’t  and  the  reasons  why. 

When  Apps  Are  Immature 

When  Unilever  decided  to  replace  its  trans¬ 
portation  management  system  (which  calcu¬ 
lates  transit  times,  determines  how  orders 
should  be  shipped,  selects  carriers  and  tracks 
shipments  from  order  through  delivery),  the 
first  decision  the  company  had  to  make  was 
whether  to  move  to  a  hosted  system  or  to  buy 
and  install  software.  It  chose  hosting. 

The  total  value  proposition — including 
speed  to  implementation  and  functionality — 


was  a  major  factor  in  Unilever’s  decision  to 
use  LeanLogistics’  hosted  system,  according 
to  Roch  Boucher,  IT  director  for  supply  chain 
at  the  $53  billion  consumer  packaged  goods 
company.  Boucher  says  he  expects  the  trans¬ 
portation  management  space  will  undergo 
significant  changes  during  the  next  three 
years,  and  “we  expect  that  any  system — 
whether  hosted  or  off-the-shelf — will  require 
frequent  upgrades.” 

If  Boucher  had  deployed  a  transporta¬ 
tion  management  system  in-house,  his  staff 
would  have  been  responsible  for  administer¬ 
ing  upgrades,  enhancements  and  patches.  In 
the  hosted  model,  the  vendor  handles  such 
time-consuming  tasks  behind  the  scenes.  And 
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the  associated  costs  are  built  in  to  the  sub¬ 
scription  fee,  instead  of  popping  up  as  unex¬ 
pected  expenses. 

“If  you’re  purchasing  a  system  where  there 
are  going  to  be  rapid  changes  and  rapid  func¬ 
tionality  enhancements  because  that  applica¬ 
tion  area  is  not  mature,  it  may  be  worth 
buying  the  ability  to  keep  on  the  forefront  of 
those  changes,”  says  Boucher. 

When  Automating 
for  the  First  Time 

Tama  Olver,  vice  president  and  CIO  of  life  sci¬ 
ences  company  Applera,  thinks  software  as  a 
service  works  best  for  straightforward  appli¬ 
cations  that  serve  standard  business  processes 
such  as  payroll,  expense  report  management 
and  travel.  She  also  notes  that  she’s  had  the 
most  success  using  software  as  a  service  when 
automating  business  processes  for  the  first 
time  because  there  are  no  legacy  processes  to 
replace.  “Moving  from  one  automated  process 
to  another  might  require  a  lot  of  reengineer¬ 
ing,”  says  Olver. 


accounts  payable.  And  because  so  many 
employees  are  now  using  the  online  travel 
booking  system,  Applera  has  been  able  to 
reduce  its  number  of  in-house  travel  agents 
from  nine  to  four. 

Olver  says  the  deployments  of  these  appli¬ 
cations  were  painless  because  the  software  is 
so  easy  to  use  and  the  Web  interfaces  so  intu¬ 
itive.  Because  software  as  a  service  is  often 
geared  toward  business  users,  the  interfaces 
have  to  be  easy  to  grasp  quickly,  says  Olver. 

“In  every  case  where  I’ve  had  real  success 
buying  services  this  way,  I’ve  been  automat¬ 
ing  a  process  for  the  first  time,”  she  says. 

When  the  System  Has 
Become  Commoditized 

There  was  a  time  when  the  IT  department  at 
Qantas,  the  Aussie  airline,  did  everything  up 
to  and  including  building  its  own  comput¬ 
ers.  The  role  of  the  IT  department  started 
to  change  four  years  ago  when  the  airline 
decided  to  outsource  what  used  to  be  one 
of  the  most  important  pieces  of  its  IT  infra¬ 


Hosted  software  providers  can't  provide 
high  degrees  of  customization  because 
it’s  antithetical  to  their  business  model. 


When  replacing  an  existing  capability,  the 
legacy  capability  is  often  integrated  with  exist¬ 
ing  systems  and  processes,  which  increases  the 
difficulty  of  change  management,  she  adds. 
“In  my  experience,  software  as  a  service 
requires  that  the  company  adopt  a  preexist¬ 
ing  process  that  may  be  very  different  from 
the  legacy  process  in  place.” 

Applera  is  using  hosted  software  from 
Concur  Technologies  to  automate  its  expense 
reporting  and  reimbursement  process,  and  is 
using  a  hosted  online  travel  booking  system 
from  GetThere.  Since  Applera  began  using 
Concur’s  Expense  Service  software  in  Novem¬ 
ber  2003,  the  company  has  reduced  the  num¬ 
ber  of  employees  processing  paper  expense 
reports  from  seven  people  to  just  one  full- 
timer  and  one  part-timer.  The  five  employees 
who  previously  pushed  paper  now  work  in 


structure,  its  reservation  system,  to  Amadeus 
Global  Travel,  a  technology  services  provider 
for  the  travel  industry. 

Forty  years  ago,  reservation  systems  pro¬ 
vided  airlines  with  a  competitive  advantage, 
says  Fiona  Balfour,  CIO  of  Qantas.  But  as  the 
technology  for  reservation  systems  matured 
and  became  less  expensive,  every  airline  even¬ 
tually  had  essentially  the  same  reservation  sys¬ 
tem,  and  there  was  no  longer  any  competitive 
advantage — only  additional  costs.  Qantas 
reasoned  that  if  it  could  use  a  hosted  reserva¬ 
tion  system,  it  could  save  a  lot  of  money,  espe- 
cially  if  other  airlines  used  the  same  system 
and  infrastructure,  thus  giving  the  provider 
the  economies  of  scale  that  would  let  it  offer 
the  service  at  a  lower  price. 

Qantas  pays  for  Amadeus’s  reservation  sys¬ 
tem  according  to  the  number  of  passengers 


U.S.  spending 

on  software  as 
a  service  topped 

$3  billion 

in  2003,  growing 
32%  over  the 
previous  year. 

It  will  reach 

$9  billion 

by  2008. 

Source:  IDC 


who  buy  tickets.  “When  we  have  a  really  good 
year,”  says  Balfour,  “Amadeus  shares  in  that 
windfall  because  they  get  more  revenue. 
When  we  have  a  bad  year,  we’re  not  being 
hung  out  to  dry  either  by  paying  for  a  system 
that  we’re  not  fully  utilizing.” 

Having  Amadeus  host  its  reservation  sys¬ 
tem  was  a  precursor  to  the  $450  million  deal 
Qantas  struck  with  IBM  Global  Services  in 
May  2004  to  outsource  its  data  center  opera¬ 
tions.  In  this  arrangement,  Qantas  is  paying 
for  only  the  computing  power  it  uses,  which 
has  helped  Balfour  drop  her  fixed  costs  from 
70  percent  to  30  percent  of  her  overall  data 
center  budget. 

When  You  Need  to  Customize 

Hosted  software  isn’t  for  everyone  and  every 
situation,  however.  Customization  is  one  key 
reason  why  companies  opt  for  traditionally 
licensed  and  installed  software  over  soft¬ 
ware  as  a  service.  Hosted  software  providers 
can’t  provide  high  degrees  of  customization 
because  it’s  antithetical  to  their  business  model: 
The  more  customized  a  hosted  application 
becomes,  the  smaller  the  potential  audience 
and  the  higher  the  overall  costs.  For  hosted 
software  providers,  the  more  vanilla  the  appli¬ 
cation,  the  better. 
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Why  do  82%  of  Fortune  500®  companies  use  Business  Objects  business  intelligence  software? 
Simple.  They  get  better  information.  Accurate  information.  Consistent  information.  Up-to-date 
information.  Actionable  information.  All  in  dashboards,  reports,  and  scorecards  that  allow 
you  to  track,  understand,  and  manage  your  business. 

More  than  26,000  organizations  of  all  sizes  use  our  software  to  unlock  the  power  of  information 
to  improve  enterprise  performance.  If  you  don't,  perhaps  it's  time  to  see  what  you're  missing. 


Business  Objects 

The  business  intelligence  standard. 


To  see  how  business  leaders  around  the  world  use  our  software,  visit  ►  www.businessobjects.com/leaders 


But  vanilla  isn’t  everyone’s  favorite  fla¬ 
vor.  Applera,  for  instance,  is  moving  from 
a  hosted  performance  management  and 
employee  review  system  to  one  the  com¬ 
pany  will  install  in-house,  because  the 
hosted  system  doesn’t  provide  Applera  with 
the  flexibility  the  company’s  review-and- 
reward  system  requires.  The  one-size-fits- 
all  model  of  software  as  a  service  doesn’t 
lend  itself  to  companies  with  unique  per¬ 
formance  appraisal  and  review  processes. 

When  Dennis  Hunsberger  was  trying  to 
decide  between  a  traditional  in-house 
CRM  implementation  from  Onyx  Soft¬ 
ware  or  a  hosted  Salesforce.com  system, 
he  asked  both  companies  to  prototype 
how  their  respective  offerings  would  inte¬ 
grate  with  his  back-end  systems.  Huns¬ 
berger — the  vice  president  of  application 
systems  for  AgVantis,  the  IT  department 
for  farm  credit  associations  and  banks  in 
Colorado,  Kansas,  New  Mexico  and  Okla¬ 
homa — wanted  to  make  sure  Onyx’s  and 
Salesforce. corn’s  products  could  do  what 
their  salespeople  claimed.  And  he  wanted 
his  developers  (who’d  be  doing  the  cus¬ 
tomization  and  integration)  to  have  an  idea 
of  what  was  ahead.  Onyx  won  the  con¬ 
tract,  in  part  because  it  enthusiastically 
ponied  up  one  of  its  employees  to  do  what 
AgVantis  had  asked  even  before  AgVantis 
had  selected  them  or  paid  a  dime.  Huns¬ 
berger  says  Salesforce.com  kept  wanting 
a  commitment  before  it  would  provide 
resources.  He  says  Salesforce.com’s  reluc¬ 
tance  to  do  the  prototyping  before  sign¬ 
ing  a  deal  may  have  indicated  the  vendor 
was  concerned  that  its  system  wouldn’t 
be  able  to  do  what  Onyx  needed  when 
they  got  down  to  brass  tacks,  but  Huns¬ 
berger  says  that  wasn’t  the  sense  he  got. 
“I  got  the  impression  that  they  had  limited 
resources,”  he  says. 

Whatever  Salesforce.com’s  reasons,  the 
key  was  that  Hunsberger  had  done  his 
research.  Do  the  same,  and  software  as  a 
service  might  find  a  money-saving  fit  in  your 
company  as  well. 


Senior  Writer  Meridith  Levinson  can  be  reached 
at  mlevinson@cio.com. 


Bandwidth  Problems 


STANDARDS  BATTLES  |  Products 
based  on  wireless  1394  (a.k.a.  FireWire) 
for  cable-free,  high-speed  communica¬ 
tions  between  digital  devices  should  arrive 
by  the  middle  of  next  year. 

This  past  May,  the  1394  Trade  Associa¬ 
tion  published  its  protocol  adaptation  layer 
(PAL)  support  for  IEEE  802.15.3,  the  current 
wireless  communications  standard  for 
55Mbps  communications  or  a  2.4GHz  sig¬ 
nal.  Using  this  PAL,  products  that  support 
1394  would  then  be  able  to  stream  data  over 
the  airwaves  at  rates  suitable  for  high- 
definition  video.  The  prospect  is  tantalizing 
for  consumer  electronics  companies,  which 
can  imagine  the  technology  embedded  in 
everything  from  video  cameras  to  television 
sets  to  stereo  systems. 

But  things  are  not  quite  as  rosy  for  the 
next  generation— 802.15.3a,  or  UltraWide- 
band,  which  would  push  transmission 
speeds  to  400Mbps.  A  debate  between 
the  Multiband  OFDM  Alliance  (MBOA), 
which  includes  Intel  and  Texas  Instruments, 
and  the  Direct  Sequence  UWB  (DS-UWB) 
Forum,  led  by  Motorola,  over  specific 


features  in  the  underlying  standards  has 
slowed  the  process. 

The  problem,  says  Dick  Davies,  a  spokes¬ 
man  for  the  1394  Trade  Association,  is  dif¬ 
ferences  of  opinion  over  whether  existing 
specifications  have  the  bandwidth  and 
performance  necessary.  While  DS-UWB  is 
looking  to  move  quickly  (and  indeed  already 
has  a  number  of  consumer  electronics  com¬ 
panies  signed  on  for  products),  the  MBOA 
group  is  urging  restraint  to  provide  enough 
time  to  make  what  it  considers  necessary 
performance  enhancements. 

Regardless,  Davies  notes,  products  are 
coming.  For  the  1394  Association’s  part,  it's 
willing  to  work  with  any  and  all  players.  And 
in  the  meantime,  one  small  company, 
Appairent  Technologies,  has  plans  to  launch 
a  small  device  that  would  plug  into  existing 
FireWire  ports  and  provide  instant  wireless 
connectivity  using  existing  standards 
instead  of  waiting  for  the  next  generation  of 
802.15.3.  Products  could  arrive  as  early  as 
the  second  quarter  of  2005,  according  to 
Appairent. 

-Christopher  Lindquist 
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Managing  some  of  the  parts  or 
the  sum  of  the  parts? 


holistic:  // 

(whole'is-tic) 

the  importance  of 
the  whole  and 
interdependence 
of  its  parts. 


Maximize  IT  value  with  holistic  IT  management  and  governance 

IT  is  a  complex  business  within  a  business:  a  set  of  interdependent,  business-critical  functions  that 
your  organization  relies  on  to  succeed.  Effective  governance  requires  seamless  control  and  a  clear 
understanding  of  how  these  parts  work  together.  Compuware  IT  Governance  by  Changepoint  gives 
you  the  power  to  manage  IT  as  an  integrated  whole  and  maximize  the  value  of  every  project,  application 
and  infrastructure  investment. 

Awarded  “Best  Solution”  by  attendees  at  the 

Gartner  Project  and  Portfolio  Management  2004  Conference 

Visit  our  Governance  Resource  Center  at 
www.compuware.com/holistic 
for  expert  views  on  IT  Governance 


www.compuware.com 


It’s  the  Process, 
Stupid 

The  tools  exist,  so  now’s  the  time 
for  transparent  government 

BY  ERIC  KNORR 


E-GOVERNMENT  |  By  the  time  you  read 
this,  the  election  will  be  over.  No  matter  who 
won,  I’ve  got  one  thing  to  say:  Democracy 
without  easy  access  to  reliable  information 
about  government  processes  and  key  per¬ 
formance  indicators  (KPIs)  is  a  farce. 

Voters  and  politicians  alike  have  a  huge 
transparency  problem,  where  processes  are 
opaque  and  key  indicators  are  buried  in 
comma-delimited  files  and  PDFs.  The  situa¬ 
tion  cries  out  for  business  process  manage¬ 
ment  (BPM)  and  business  activity  monitoring 
(BAM).  Both  of  these  technologies  can  work 
even  when  you  don’t  have  the  money  to  rip 
and  replace  old  systems — which  we  don’t. 

The  government  churns  such  vast  amounts 
of  money  and  information.  Shouldn’t  people 
who  work  in  government  and  their  con¬ 
stituents  be  able  to  view  simple,  Web-based 
process  models  and  dashboards  to  see  what’s 
going  on?  If  you  don’t  make  it  mandatory  to 
open  up  government  with  such  technology,  is 
there  any  other  effective  way  to  guard  against 
the  influence  of  special  interests? 

Take  taxes  as  an  example.  It  took  David 
Cay  Johnston,  author  of  a  superb  book  titled 
Perfectly  Legal ,  nearly  a  decade  to  decipher 
the  U.S.  tax  system.  In  the  course  of  writing 
that  book,  he  discovered  that  only  a  handful 
of  people  in  Congress  really  understood  the 
tax  code.  He  also  found  countless  loopholes, 
many  of  them  traceable  to  special  interests. 

Wouldn’t  it  be  instructive  if  you  could 


watch  the  dollars  draining  through  those 
loopholes  and  see  who  was  responsible  for  the 
laws  that  created  them?  But  perhaps  that’s 
why  we  don’t  have  the  tools  we  need. 

Here’s  another  favorite.  According  to  the 
Department  of  Defense ’s  Office  of  the  Inspec¬ 
tor  General,  more  than  a  trillion  dollars  has 
gone  missing  from  the  Pentagon.  Some 
observers  believe  that  the  number  may  be  sev¬ 
eral  times  larger.  But  no  one  knows  for  sure, 
because  the  Pentagon  has  no  auditable 
accounting  system.  Now,  I  understand  that 
parts  of  the  Pentagon  budget  need  to  be  kept 
secret,  but  defense  contractors  have  more 
accurate  data  about  where  the  money  goes 
than  the  Pentagon  itself. 

Holy  Sarbox!  With  all  due  sensitivity  to 
national  security  (and  the  job  security  of  gen¬ 
erals  pushing  weapons  systems  that  will  never 
work  properly),  I  would  like  to  learn  more 
about  what  happens  to  half  my  federal  tax  dol¬ 
lars.  What  incentive  do  the  Defense  Depart¬ 
ment  and  its  contractors  have  to  clean  up  their 
acts  if  there’s  no  public  visibility? 

This  isn’t  just  about  playing  gotcha.  There’s 
an  open-source  aspect  as  well.  With  open 
source,  the  whole  idea  is  that  anyone  can  come 
along  and  fix  or  improve  things.  I’m  not  sug¬ 
gesting  this  would  become  a  popular  hobby. 
But  what  if  ordinary  citizens,  not  just  wonks  in 
watchdog  groups,  were  looking  at  all  sorts  of 
big,  messy  government  processes  through  their 
browsers  and  suggesting  improvements?  Attd 


Wouldn’t  it  be 
instructive  if  you 
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what  if  politicians  were  forced  to  fess  up  to 
which  special  interests  urged  them  to  put  the 
twists  and  exceptions  in  processes  that  should 
be  straightforward? 

Truth  is,  some  of  these  systems  are  already 
in  place.  Defense  contractors  develop  and 
maintain  process  management  and  control 
solutions  for  a  range  of  government  organi¬ 
zations  right  now.  But  they’re  mainly  closed, 
expensive,  proprietary  systems.  There  are  also 
a  handful  of  BPM  pureplays — including 
Appian,  Handysoft  and  Metastorm — that 
have  both  government  solutions  and  a  com¬ 
mitment  to  open  standards.  The  more  open 
the  software,  the  better  chance  we’ll  have  of 
seeing  what’s  happening  over  HTTP  one  day. 

I’m  not  being  naive  here.  Shining  a  light  on 
government  processes  will  require  enormous 
public  pressure.  And  converting  reams  of  unin¬ 
telligible  data  into  Web-ready  models  and 
dynamic  charts  won’t  guarantee  interest  by  the 
public.  But  at  least  the  processes  and  what 
flows  through  them  will  be  observable.  And 
over  time,  they’ll  become  a  part  of  the  culture. 


Eric  Knorr  is  executive  editor  at  large  for  Infoworld. 
He  can  be  reached  at  eknorr@pacbell.net. 
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CONGRATULATIONS 

TO  THE  WINNERS 

OF  THE 2005 

CIO  ENTERPRISE 
VALUE  AWARDS! 
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Commonwealth  of  Pennsylvania, 
Department  of  Public  Welfare 


Who  Will  Win 
the  Grand  Award? 

The  winner  of  the  Grand  CIO  Enterprise 
Value  Award  will  be  selected  from 
among  these  winners  and  revealed  at 
the  CIO  Perspectives®  on  Enterprise 
Value  Conference,  February  6-8,  2005, 
at  the  Harbor  Beach  Marriott  Resort  & 
Spa  in  Ft.  Lauderdale,  Fla. 

How  Will  IT  Contribute  to 
Enterprise  Value  in  2005? 

We  will  explore  this  in  depth  at  the 
conference  and  in  the  February  15, 
2005,  issue  of  CIO.  You  won't  want 
to  miss  it! 


ConocoPhillips 


Registration  information  at 
www.cio.com/conferences 


Foley  &Lardner 

Marriott  International 

St.  Jude  Children’s  Research  Hospital 

Zurich  Financial  Services  Group 


This  year’s  CIO  Enterprise  Value  Awards 
are  proudly  underwritten  by 

UGS 

The  PLM  Company 


Presented  by 


CIO 


The  Resource  for 
Information  Executives 


CIO  Perspectives  on  Enterprise  Value  & 
CIO  Enterprise  Value  Awards'Ceremony 

February  6-8, 2005  •  Harbor  Beach  Marriott  Resort  &  Spa  ■  Ft.  Lauderdale,  FL 


800.355.0246  or  www.cio.com/conferences 
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t  I  I  Because  you  need 
Commiseration, 
Validation  &  Inspiration. 

Commiseration.  No  one  else 
understands  the  pressures, 
problems  and  pain  a  CIO  experi¬ 
ences  betterthan  another  CIO 
(especially  when  it  comes  to 
showing  IT  value). 

Validation.  Find  out  from  your 
peers  which  processes,  policies 
and  products  work,  and  which 
don’t. 

Inspiration.  Get  new  ideas  from 
the  CIOs  who’ve  been  on  the 
leading  (sometimes  bleeding) 
edge  of  the  profession,  and  from 
our  special  guests. 

We  recognize  that  it’s  as  impor¬ 
tant  to  have  plenty  of  opportuni¬ 
ties  to  meet  informally  with  your 
peers  as  it  is  to  participate  in 
conference  sessions.  We  give 
you  more  opportunities  to  meet 
and  learn  from  more  of  your 
peers  over  three  days,  with  the 
golf  tournament  Sunday  morn¬ 
ing,  the  Super  Bowl  party 
Sunday  evening,  informative 
chats  at  breakfast  and  lunch 
roundtables,  the  intensely  inter¬ 
active  case  study  workgroup 
sessions,  and  relaxed  conversa¬ 
tions  duringthe  daily  receptions. 
And  we’re  happy  to  hook  you  up 
with  other  attendees  or  corpo¬ 
rate  sponsors  you’d  like  to  meet. 


Because  you  still  need 
to  demonstrate  the 
value  of  IT. 

We  offer  a  wealth  of 
different  perspectives, 
to  give  you  more  ways 
of  looking  at  value: 

View  From  the  Top:  A  Perspective 
on  IT  Enterprise  Value 
William  J.  Shaw,  President  &  COO, 
Marriott  International,  Inc. 

Flow  do  CEOs  and  other  senior 
management  think  about  the  role  of 
IT,  and  about  the  ability  of  the  CIO 
to  articulate  and  deliver  true  value 
to  the  enterprise?  What  criteria  do 
they  use  for  measuring  the  CIO’s 
success  or  failure?  Flas  the  view 
changed  overtime— and  for  better 
or  worse?  What  were  the  major 
influences  in  changing  those  views? 
We  I  isten  as  a  top  executive  from 
one  of  the  Enterprise  Value  Award¬ 
winning  companies  gives  us  his 
“view  from  the  top." 


Business/IT  Case  Study 
&  Workgroups 

Robert  Austin,  Associate  Professor 
&  Chair  of  the  Executive  CIO 
Program,  Harvard  Business  School 

Austin  leads  us  through  a  case  cho¬ 
sen  for  its  emphasis  on  the  strategic 
value  of  IT  to  the  subject  enterprise. 
We  then  divide  into  small  working 
groups,  and  are  tasked  with  coming 
up  with  a  set  of  recommended 
actions  and  solutions  for  the  sub¬ 
ject  enterprise’s  CIO.  Select  work¬ 
ing  groups  will  report  theirfindings 
back  to  the  assembly  at  large. 


The  Value  Proposition 
Tom  Davenport,  Conference 
Moderator,  Professor  &  Director  of 
Research,  Executive  Education, 
Babson  College 

Why  is  it  still  so  hard  to  define  and 
demonstrate  the  strategic  value  of 
IT  to  the  enterprise?  Davenport, 
noted  consultant,  author  and  edu¬ 
cator,  kicks  off  the  conference  with 
his  insights  on  IT  value:  everyone 
from  the  business  unit  heads  to  the 
chairman  of  the  board  is  demand¬ 
ing  full  value  for  the  organization's 
IT  investments.  Flow  do  you  agree 
on  just  whatthe  value  will  be?Flow 
will  it  be  measured?  Flow  do  you 
best  communicate  it  to  your  con¬ 
stituents? 


Conversations  with  This  Year’s  CIO 
Enterprise  Value  Award  Winners 
They’re  first  scrutinized  by  CIO 
editors,  Review  Board  members, 
and  our  judging  panel  of  top-notch 
CIOs.  Meet  with  the  stars  of  this 
year’s  winning  organizations,  who 
understand  the  uphill  battle  IT  con¬ 
tinues  to  face.  It’s  your  chance  to 
discuss  their  particular  case  in 
more  detail  and  take  away  lessons 
you  can  apply  to  your  own  organiza 
tion  back  home. 


February  6-8. 2005  ■  Harbor  Beach  Marriott  Resort  &  Spa 


Plus 

The  Super  Bowl 
Networking  Party 

Sunday  evening  is  for  the  Super 
Bowl.  Even  if  you're  not  a  football 
fan,  you  can  enjoy  the  networking— 
and  critiquing  the  new  crop  of  TV 
commercials  (were  they  really 
worth  all  that  money?). 

The  Gala  CIO 
Enterprise 
Value  Awards 
Ceremony  &  Dinner 

Tuesday  evening  we’ll  honor  all  the 
winners  in  the  industry  categories— 
and  announce  the  winner  of  the 
Grand  CIO  Enterprise  Value 
Award— at  a  black-tie  reception, 
awards  ceremony  and  dinner.  It's  a 
great  time  to  celebrate  with  your 
CIO  peers  as  we  close  out  the  con¬ 
ference. 

This  year’s  CIO  Enterprise 
Value  Awards  are  proudly 
underwritten  by 
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UGS 

The  PLM  Company 
Sponsored  by 

C4I 

Computer  Aid,  Inc . 


Presented  by 


The  Resource  for 
Information  Executives 


Ft.  Lauderdale,  FL 
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COVER  STORY 
Tag,  You’re  Late 

By  Thomas  Waitgum  I  50 

Wal-Mart’s  reputation  as  a  technol¬ 
ogy  leader  could  suffer  as  a  result 
of  its  suppliers  failing  to  meet  its 
much-publicized  January  2005  deadline  for 
using  RFID  tags  on  pallet  shipments.  Wal- 
Mart’s  mistake,  say  suppliers  and  observers, 
was  to  set  the  deadline  before  the  technology 
and  business  case  had  matured  to  a  point 
where  RFID-tagging  made  good  economic 
sense  for  suppliers,  customers  and  Wal-Mart 
itself.  Some  of  Wal-Mart’s  top  suppliers  have 
told  CIO  they  either  won’t  make  the  dead¬ 
line,  or  they  will  comply  with  the  letter — not 
the  spirit — of  the  mandate.  And  they  say  the 
technology  is  likely  to  have  a  significant  fail¬ 
ure  rate.  Wal-Mart  acknowledges  that  some 
suppliers  are  having  trouble,  but  it  won’t  dis¬ 
cuss  what  will  happen  if  there  is  widespread 
noncompliance.  The  retailer’s  goal  for  RFID 
technology  is  to  maintain  its  low-pricing 
model  by  removing  supply  chain  and  inven¬ 
tory  blind  spots. 


“We’ve  already  worked 
with  a  couple  of  suppliers 
in  the  top  100  that  won’t 
be  live  in  January  on 
some  alternative  plans 
for  them.  We  will  work 
with  each  supplier 
individually  and  look  at 
the  reasons  why  they 
can’t  make  the  deadline.” 

-SIMON  LANGFORD,  MANAGER  OF 
RFID  STRATEGY,  WAL-MART 


BPM:  A  New  Glue  or  the  Old  Soft  Shoe?  By  Ben  Worthen  I  58 

THE  BUSINESS  PROCESS  MANAGEMENT  (BPM)  space  is  flooded  with  a  confusing  array 
of  products  from  more  than  100  vendors.  Some  BPM  applications  monitor  your  business  processes; 
others  automate  workflow  or  serve  as  enterprise  application  integration  tools.  These  products  also 
help  identify  areas  of  your  business  that  need  to  be  automated  and  enforce  business  rules;  they  even 
help  integrate  existing  IT  infrastructures.  They  work  by  extracting  data  from  a  company’s  business 
applications  and  tracking  how  the  information  is  used  to  perform  a  task,  or  escorting  the  data  through 
a  set  of  tasks  to  ensure  that  a  business  process  is  being  followed.  To  deploy  BPM  successfully  and 
reap  promised  gains  in  efficiency,  CIOs  must  have  a  specific  process  in  mind  that  they  would  like  to 
improve.  They  must  monitor  the  business  process  to  learn  how  it  works,  and  then,  with  the  process 
owner,  figure  out  how  to  change  the  process  and  redesign  it  accordingly. 


A  Travel  Guide  to  Collaboration  By  Alice  Dragoon  I  68 

BECAUSE  OF  COMPETITIVE  PRESSURES  and  resource  constraints,  it’s  becoming  ever  more 
essential  (and  common)  for  companies  to  collaborate — both  internally  between  divisions,  and  exter¬ 
nally  with  partners  and  even  competitors — to  achieve  a  common  goal  or  create  mutual  value.  Collab¬ 
orators  are  combining  resources  and  sharing  customer  information,  supply  chain  data,  intellectual 
property  and  R&D  expertise.  IT  plays  a  key  enabling  role,  particularly  in  integrating  systems,  secur¬ 
ing  data  and  providing  an  electronic,  virtual,  shared  workspace  for  collaborative  teams.  This  overview 
lays  out  out  the  wide  variety  of  collaboration  types,  explores  common  barriers  to  success,  and  details 
the  best  practices  used  by  companies  such  as  Procter  &  Gamble,  Visa,  BAE  Systems  and  the  Chicago 
Mercantile  Exchange  to  make  partnering  pay  off. 


Book  Excerpt:  Confronting  Reality  By  Larry  Bossidy  and  Ram  Charan  I  79 

LARRY  BOSSIDY,  retired  chairman  and  CEO  of  Honeywell  International,  and  Ram  Charan, 
business  guru  and  author,  have  followed  up  their  2002  best-seller,  Execution:  The  Discipline  of 
Getting  Things  Done,  with  a  how-to  guide  for  confronting  change.  They  focus  on  how  to  spot  vul¬ 
nerabilities  in  the  organization  and  scan  for  competitive  threats,  how  to  diagnose  what  needs  to  be 
changed  and  what  to  leave  alone,  and  how  to  prepare  organizations  for  rapid  change.  The  authors’ 
basic  management  tool  is  the  business  model,  which  they  break  down  into  three  components  that 
leaders  can  act  on:  assessing  the  external  environment  that  the  organization  inhabits,  setting  financial 
targets  for  profitability,  and  gauging  the  adequacy  of  the  company’s  internal  processes  and  structures. 
The  excerpt  focuses  on  managing  change  at  Cisco. 


Essential  Technology:  Host  with  the  Most  By  Meridlth  Levinson  I  86 

AT  A  TIME  WHEN  COMPANIES  are  still  playing  it  safe,  CIOs  are  addressing  business  users’ 
growing  IT  demands  by  finding  service  providers  that  will  host,  maintain,  and  upgrade  applications 
and  systems  for  them.  The  arrangement  usually  involves  a  monthly  or  transactional  fee,  and  is  com¬ 
monly  known  as  “hosting”  or  “software  as  a  service.”  In  a  recent  survey,  31  percent  of  the  respondents 
from  companies  with  more  than  1,000  employees  said  they  currently  use  software  as  a  service,  with 
an  additional  1 1  percent  saying  they  were  in  the  process  of  evaluating  software-as-a-service  offerings 
and  17  percent  saying  they  planned  to  evaluate  them.  While  hosting  can  be  a  very  attractive  option, 
it’s  not  right  for  every  company,  nor  do  all  applications  lend  themselves  delivery  over  the  Internet. 

We  look  at  three  companies — Unilever,  Qantas  Airways  and  Applera — to  see  where  hosted  applica¬ 
tions  work,  where  they  don’t  and  the  reasons  why. 
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3Com  Builds  a  Better  Network, 

So  You  Can  Build  a  Better  Business 

3Com  designs  comprehensive,  enterprise-wide  communication  solutions  that 
make  powerful  and  sophisticated  technologies  affordable  and  practical. 

Whether  used  for  anchoring  high-traffic  campus  networks  or  powering  small 
remote  offices,  our  routing,  switching,  telephony,  wireless  and  security  solutions 
deliver  world  class  high-performance  and  availability. 

With  over  25  years  of  networking  know-how  incorporated  into  each  and  every 
product,  3Com  lets  you  spend  less  time  worrying  about  your  network,  and  more 
time  growing  your  business. 

For  more  information  go  to  www.3com.com/enterprise07 
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3Com®  Switch  7700  Family 

Chassis  Solution  for  Campus  Networks 

High  Performance  Enterprise 
Switching: 

Build  your  campus  network  core  around 
the  3Com  Switch  7700.  Choose  the 
chassis  configuration  to  match  your 
needs.  Resilient  architecture  supports 
redundant  switch  fabrics  and  hot-swap 
modules.  Achieve  densities  of  120 
Gigabit  or  288  10/100  ports.  10  Gbps 
ready  to  help  protect  your  investment. 
An  exceptional  value  over  what  other 
vendors  will  offer.  Act  now,  trade  in 
your  old  equipment  and  receive  15% 
off  a  new  purchase  of  eligible  3Com 
switches.  For  more  information  go  to 
www.3com.com/tradeup 


"Most  of  the  vendors  we  evaluated 
offered  high-speed  solutions,  but  none 
featured  3Com's  practicality,  simplicity, 
and  ease  of  use. " 

Larry  Padgett 
Director  of  Network  Services 
Palm  Beach  County  School  District 
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>  With  Sprint,  FTD  is  beautiful 


When  holiday  call  volume  and  Web  traffic  spike  by  a  factor  of  ten, 
floral  superpower  FTD  doesn't  worry  about  their  network  -  even 
though  their  entire  business  relies  on  it.  Because  FTD  relies  on  Sprint. 
Sprint  connects  FTD  to  over  52,000  florists  in  154  countries  while 
delivering  network  reliability  so  good  it  helps  FTD  guarantee  100% 
satisfaction  to  their  customers.  Network  reliability  is  why,  for  the 
past  14  years,  this  leading  provider  of  flowers  has  turned  to  Sprint. 
In  business,  perennials  don't  get  much  more  beautiful  than  that. 
With  Sprint,  business  is  beautiful.SM 
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